Support

Admin Tools

#22183 IP Blacklist

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Wednesday, 04 March 2015 08:02 CST

user85353
 I have added a URL to the blacklist and also after determining where it originated I also banned the country. I stll see they are a refer in the "Google Analytics Dashboard" list and the number of visits increases every day. Does this mean they are visiting the site without any effect from the WAF or are they receiving the 403 message? The blacklist is set to "yes" in the WAF config.

Can you please clarify.

tampe125
Akeeba Staff
Hello Brian,

I think you meant you added an IP to the blacklist, right?
What's the exact value you saved?

If you want to test the GeoBlock feature you can try searching on Google a web proxy for such country: usually they exists for the main countries.

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user85353
Hi Davide,
Yes I added the following IP address 78.110.60.230 it actually covers two domains/URL's: they are
" forum.topic57147144.darodar.com" and " o-o-6-o-o.com ". the first one was stopped but the second address seems to keep coming as shown in my google analytic dashboard.

Regards,

Brian

nicholas
Akeeba Staff
Manager
Google Analytics shows the domain name of the referer. In other words it tells you which site has linked back to you. Let me try an example.

Alice has the domain name alice.com.

Malroy has the domain name malroy.com. On his site he has a link to alice.com/foobar.html.

Bob is a casual user who known neither Alice nor Malroy. He stumbles upon Malroy's link and clicks on it. Therefore he visits alice.com with the referer set to malroy.com.

If Alice blocks the IP address of malroy.com she won't be blocking Bob. Bob's visit will go through just fine and Alice's Google Analytics account will display malroy.com as a referer. That's because Bob's visit comes from Bob's IP, not from Malroy's. The referer only tells you where Bob was before he clicked a link to Alice's site, NOT where Bob himself is.

It's actually quite simple to grasp. It's simple English, even for me (I'm not a native speaker):

Visitor: he who comes by and views your site.

Referer (Referrer if you prefer proper English spelling): which site the visitor was before he clicked a link to your site, i.e. who referred the visitor to your site.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user85353
Hi Nicholas,
I understand the example. Does this apply to geo blocking as well, as all these site originate in Russia which has been excluded on the list. In fact another site has started to refer us today and has the same IP address as the other two mentioned above.

nicholas
Akeeba Staff
Manager
Yes, the same thing applies for GeoBlocking. Remember that you are seeing in Google Analytics is the referrer, i.e. which site hosts the link your visitors clicked. All IP-related features in Admin Tools care about the IP of your visitor. It's perfectly possible for, let's say, a Australian user to click on the link of the Russian site which takes them to your Australian site. Therefore they are not blocked by GeoBlocking because you permit Australian visitors.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user85353
Thanks for your help.

Regards,

Brian

nicholas
Akeeba Staff
Manager
You're welcome, Brian!

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!