• 1

Read this first!

We do not monitor these forums. The forum is provided to exchange information and experience with other users ONLY. Forum responses are not guaranteed.

However, please submit a ticket if you have an active subscription and wish to receive support. Our ticketing system is the only way of getting in touch with RSJoomla! and receiving the official RSJoomla! Customer Support.

For more information, the Support Policy is located here.

Thank you!

TOPIC: Question about Blacklist

Question about Blacklist 12 years 6 months ago #19458

  • mail440
  • mail440's Avatar
  • OFFLINE
  • Fresh Boarder
  • Posts: 3
I have some questions about the blacklist:

How do I see why an ip address was blacklisted?

How is RSFirewall blocking an ip address?
The administrator has disabled public write access.

Question about Blacklist 12 years 5 months ago #20009

  • darius2
  • darius2's Avatar
  • OFFLINE
  • Fresh Boarder
  • Posts: 3
  • Thank you received: 1
My experience so far is that there is no automated adding of IP's to the Blacklist. You need to enter the RS Firewall control panel and manually add IP's if you wanted them blocked(Blackisted) or unblockable(Whitelisted).
The administrator has disabled public write access.

Question about Blacklist 12 years 5 months ago #20013

  • octavian
  • octavian's Avatar
  • OFFLINE
  • RSJoomla! Official Staff
  • Posts: 783
  • Thank you received: 110
Actually there's an option in RSFirewall! (go to Firewall Configuration > Active Scanner and enable "Automatic blacklisting").
Please note: my help is not official customer support. To receive your support, submit a ticket by clicking here
Regards,
RSJoomla! Development Team
The administrator has disabled public write access.

Question about Blacklist 12 years 4 months ago #20530

I am running RSFirewall 1.4.0 Rev 46 on a Joomla 2.5.8 installation. I have automatic blacklisting on for /administrator, and it has not automatically blacklisted an attacker that has been at it for two days now. I also added the IP to the blacklist manually. It saves the IP to the blacklist, but still doesn't block the attacker. I continue to receive e-mails that the IP is attempting to log in roughly every 2 minutes. In past versions, when I blacklisted an IP, I no longer received the e-mail notifications. I assumed this was because once blacklisted the IP couldn't even get to the administrator directory and attempt a log in. Has something changed. Getting tired of the e-mail notifications.
The administrator has disabled public write access.

Question about Blacklist 12 years 4 months ago #20533

  • octavian
  • octavian's Avatar
  • OFFLINE
  • RSJoomla! Official Staff
  • Posts: 783
  • Thank you received: 110
If you have CAPTCHA enabled for the /administrator login you'll have to disable that - they don't work together. If you have CAPTCHA, blacklisting will not work, instead a CAPTCHA image will show up after the set number of failed logins.
Please note: my help is not official customer support. To receive your support, submit a ticket by clicking here
Regards,
RSJoomla! Development Team
The administrator has disabled public write access.

Question about Blacklist 12 years 4 months ago #20541

That seemed to be the problem, thanks for the quick response.
The administrator has disabled public write access.
  • 1

Read this first!

We do not monitor these forums. The forum is provided to exchange information and experience with other users ONLY. Forum responses are not guaranteed.

However, please submit a ticket if you have an active subscription and wish to receive support. Our ticketing system is the only way of getting in touch with RSJoomla! and receiving the official RSJoomla! Customer Support.

For more information, the Support Policy is located here.

Thank you!