Resolved Can we change/tune the "frequency" filtering?

Jim SoG said:
Ok, Dev Team is not able to duplicate the issue and in fact I can not either. They are suspecting your net connections but they are now checking into the firewall and other logs. Will post more when I am told.....
Click to expand...

I mean, the screenshot I attached proves it's OB's web firewall service that is doing it. The dev's IPs may be whitelisted which will prevent them from being impacted as well.

I was able to make it happen by opening roughly 8 tabs of OB pages in about 8 seconds. I was then blocked by the OB web firewall for 15 minutes. The web firewall is a 3rd party service external to OB's web instances.
 
DRAX said:
I mean, the screenshot I attached proves it's OB's web firewall service that is doing it. The dev's IPs may be whitelisted which will prevent them from being impacted as well.

I was able to make it happen by opening roughly 8 tabs of OB pages in about 8 seconds. I was then blocked by the OB web firewall for 15 minutes. The web firewall is a 3rd party service external to OB's web instances.
Click to expand...

Exactly. The dev team needs to duplicate from non-whitelisted IPs/subnets. @DRAX did the heavy-lifting showing it's the web firewall (as opposed to forum software), which also proves it's not my connection (or his).

-TJ
 
From Dev Team: I’ve made an adjustment for this issue. Please let us know if this is reported again.
Clear Cache and reboot.

Jim
 
I just ran into this issue about 20 minutes ago. After opening about 5 pages in new tabs the next page load spun for a while and then I received a "This site can't be reached" error because the site too too long to respond. A few minutes later when I tried to visit the site I saw a "Access Denied - Securi Website Firewall" page.

The ~5 pages were opened a few seconds apart, so I am surprised this rate of traffic caused the IDS to temporarily block my IP. I have screenshots of both errors if they would help.
 
Jim SoG said:
From Dev Team: I’ve made an adjustment for this issue. Please let us know if this is reported again.
Clear Cache and reboot.

Jim
Click to expand...

Awesome, thanks! I just tested and the issue still exists, but it seems like a higher threshold (my non-scientific testing says it was raised to 10 concurrent connections/tabs).

-TJ
 
slomatt said:
I just ran into this issue about 20 minutes ago. After opening about 5 pages in new tabs the next page load spun for a while and then I received a "This site can't be reached" error because the site too too long to respond. A few minutes later when I tried to visit the site I saw a "Access Denied - Securi Website Firewall" page.

The ~5 pages were opened a few seconds apart, so I am surprised this rate of traffic caused the IDS to temporarily block my IP. I have screenshots of both errors if they would help.
Click to expand...
Can you post the screen shots please.....
 
From the brains: I do have a ticket open with the provider of the firewall software and I think I know what is causing the issue (though not how to solve, yet). the screenshots will be useful for troubleshooting and for verification, assuming we can get a fix in place, so that we can monitor whether the specific issue occurs again
 
Another update: I have two more modifications in place so now we will observe again

SO give it a try please.....

Thanks for your patience guys!

Jim
 
Jim SoG said:
Another update: I have two more modifications in place so now we will observe again

SO give it a try please.....

Thanks for your patience guys!

Jim
Click to expand...

Interestingly, it seems to have gotten a bit worse, at least in specific scenarios. I went back to an old thread and just tried to open 2 additional tabs of images in the thread, and hit the wall.

-TJ
 
Also guys, take screenshots, do not block out anything (i.p.) and PM them to me so I can give to the dev team. They are seeing 1 and only 1 case of the host blocking anyone and it is coming in as a BOT.

Jim
 
It seems like the firewall has become more strict again. Several times in the last few days I've opened ~5 tabs in somewhat quick succession and then gotten locked out of the site for 10-15 min, which is pretty annoying.
 
  • Like
Reactions: KonzaLander
WE also have been under attack and that firewall is saving us.... We might need to adjust to it.

Jim
 
slomatt said:
It seems like the firewall has become more strict again. Several times in the last few days I've opened ~5 tabs in somewhat quick succession and then gotten locked out of the site for 10-15 min, which is pretty annoying.
Click to expand...

Same here.

Jim SoG said:
WE also have been under attack and that firewall is saving us.... We might need to adjust to it.

Jim
Click to expand...

Interesting. What is the attack vector? Does it manifest as similar Layer 5 ports/protocols as opening lots of tabs?

-TJ
 
You must log in or register to reply here.
Top Bottom