Interpreting the detailed firewall log

  • Resolved daviesda

    (@daviesda)


    12 years, 2 months ago

    Hi Paul,

    I’m finding WordPress Simple Firewall v2.6.4 very useful. I’d like to better understand how the firewall is protecting my site so I turned on the detailed log for a few minutes.

    Can you say which of these reports mean that the request was passed by the firewall? The first one looks like it may or may not have passed (‘Firewall checking started…’, but did it finish…?). However I interpret the second as having passed, is that correct?

    Visitor IP was neither white-listed nor black-listed. Firewall checking started…
    After whitelist options were applied, there were no page parameters to check on this visit.

    Cheers,

    David.

    https://wordpress.org/plugins/wp-simple-firewall/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Paul

    (@paultgoodchild)

    12 years, 2 months ago

    Hi David,

    Basically, if the log doesn’t report that something was explicitly blocked, then the firewall checking ended without it triggering one of the rules.

    “After whitelist options were applied, there were no page parameters to check on this visit.”

    This means there was nothing for the firewall to check so it ended.

    There is a lot that I want to do with the log to improve its reporting, but I hope it helps. The log with clearly show when there was a block.

    Thanks,
    Paul.

    Thread Starter daviesda

    (@daviesda)

    12 years, 2 months ago

    Great, thanks for the explanation Paul.

    Cheers,

    David.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Interpreting the detailed firewall log’ is closed to new replies.