I've purchased Admin Tools for years now. It's a great WAF. Recently I've noticed Cloudflare IPs are constantly triggering CSRF alerts though. I use Cloudflare to speed up my website. Any idea what is causing this?
#27158 Cloudflare triggers CSRF alerts
Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a
Latest post by on Wednesday, 22 March 2017 18:17 CDT
Sunday, 19 February 2017 14:21 CST
simondavies315
Monday, 20 February 2017 01:31 CST
nicholas
Akeeba Staff
Manager
Hello Simon,
When you run your site behind a CDN, reverse proxy or caching proxy you need to set the Enable IP Workarounds feature to Yes in the Configure WAF page. If you don't the only IP address your web server sees is CloudFlare CDN's. When you enable IP workarounds you are telling your server to trust the X-Forwarded-For HTTP header which is set by CloudFlare and contains the real IP address of the person making the request to your site. Therefore attacks will be attributed to the correct IP and that IP will be blocked from accessing your site per your Admin Tools configuration settings.
For more information regarding this feature please do consult our documentation.
When you run your site behind a CDN, reverse proxy or caching proxy you need to set the Enable IP Workarounds feature to Yes in the Configure WAF page. If you don't the only IP address your web server sees is CloudFlare CDN's. When you enable IP workarounds you are telling your server to trust the X-Forwarded-For HTTP header which is set by CloudFlare and contains the real IP address of the person making the request to your site. Therefore attacks will be attributed to the correct IP and that IP will be blocked from accessing your site per your Admin Tools configuration settings.
For more information regarding this feature please do consult our documentation.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Monday, 20 February 2017 06:36 CST
simondavies315
Thank you Nicholas. I used to work at Akamai (a bigger CDN) so understand why that needs to be enabled. Just fixed it now :)
Monday, 20 February 2017 09:44 CST
nicholas
Akeeba Staff
Manager
You're welcome :)
(And yep, I know Akamai!)
(And yep, I know Akamai!)
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Wednesday, 22 March 2017 18:17 CDT
System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.