Skipping firewall checking for this visit:

  • Resolved lakenjr

    (@lakenjr)


    11 years, 4 months ago

    In the audit trail viewer, I am seeing a firewall_skip event.
    Skipping firewall checking for this visit: Parsing the URI failed.

    There is no other information shown in the audit trail, so I cannot see the URI that it is referring to.

    This comes from 77.75.77.11 which others suspect is a hacker.

    My quickfix is to block 77.75.77.11 in cloudflare

    Can/should the firewall block this type of input?

    https://wordpress.org/plugins/wp-simple-firewall/

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter lakenjr

    (@lakenjr)

    11 years, 4 months ago

    Regarding my previous posting above, I have now found the relevant Unix log entry

    [20-Jan-2015 03:43:20] PHP Warning: parse_url(/wp-login.php?redirect_to=http://www.jetlagandmayhem.com/tools) [function.parse-url]: Unable to parse URL in /home1/lakenjr/public_html/jetlagandmayhem/wp-content/plugins/wp-simple-firewall/src/common/icwp-data.php on line 136

    Plugin Author Paul

    (@paultgoodchild)

    11 years, 4 months ago

    Thanks for sharing that warning – I’ll do a bit of testing with URLs and the PHP parse_url() function.

    If I can tweak this to improve it I’ll release a fix for that.

    Separately, black listing single IP addresses is a futile endeavour, but yes, you could do that in CloudFlare.

    Thanks!
    Paul.

    Plugin Author Paul

    (@paultgoodchild)

    11 years, 4 months ago

    I’ve looked at this and I can’t replicate this PHP Warning.

    This basically means the PHP on your web hosting likely has an earlier version than mine, which is somehow more capable of parsing this URL due to improvements/bug fixes.

    I’d be interested to hear what version of PHP you’re using.

    I’ll see if there’s an alternative route to parsing the URL to get around this sort of limitation.

    Plugin Author Paul

    (@paultgoodchild)

    11 years, 4 months ago

    The latest release v4.3.4 has a little work around for when parse_url() isn’t working so hopefully this should improve for your site, and any others with this problem.

    Thanks for reporting it!
    Paul.

    Thread Starter lakenjr

    (@lakenjr)

    11 years, 4 months ago

    I have installed release 4.3.5 and will monitor messages.

    I use Apache=2.2.25 Mysql=5.5.23 PHP=5.4.17

    Joe

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Skipping firewall checking for this visit:’ is closed to new replies.