Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Latest post by nicholas on Tuesday, 07 January 2025 02:31 CST
Every other morning, I wale up to 50-100 automatic IP blocking emails. All are for 404 errors or sql-shield, and all are from different IPs. I have blocking set to only 24 hours in case a client gets blocked, and I'm not available to unblock them.
I want to disable reporting of these errors and have added them to the "do not send notifications for these reasons " list, but I still get notifications. Is this a bug, or am I doing something wrong?
Thanks in advance for your help!
Hello,
can you please attach a screenshot of the notification email you're getting?
Moreover, just to be sure, when did you perform this change? I suspect there could be some server cache that is not expired, this is why your changes are not updated. For example, unblocking a user is immediate: we simply delete the record from the database, so on the next run it shouldn't be blocked.
Davide Tampellini
Developer and Support Staff
🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
The "do not send notifications" was changed over 6 months ago when I was having the same problem. After I made the change, I was still getting notifications, so I manually added the IPs to the block list. Back then it was only a few offenders, and it settled things down for a while. Now, it's more like a distributed attack, 100 IPs in 50 different networks all attacking simultaneously. They're all 404 and sql-shield errors.
Notification email attached.
Please, I need some help here.
Today, there were another 30 notifications from Admin Tools for automatic blocking of 404-shield. Again, 404-shield has been in my "do not send notifications" list for at least 6 months!
This is happening daily or every other day. The attack is distributed, so it's coming from many different IPs, mostly from different networks and countries, including my own (USA).
The “Do not send email notifications for these reasons” controls emails sent for blocked requests, i.e. the mail template ‘Admin Tools: Blocked request’ (com_admintools.blockedrequest).
The email in your screenshot is something entirely different. It's the email sent by Admin Tools when an IP address is blocked, i.e. the mail template ‘Admin Tools: Automatic IP blocking’ (com_admintools.ipautoban). This email has nothing to do with the “Do not send email notifications for these reasons” option.
If you want to disable these emails –and you should disable them on a production site if you are not troubleshooting a specific issue– you need to go to Admin Tools, Web Application Firewall, Configure WAF, Auto-ban, and remove your email address from “Email this address after an automatic IP ban”.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Thank you for clarifying!
You're welcome!
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.
Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!