Menu

Topic-icon Possible Bug - Whitelist

  • todd.herman@toddherman.com
  • todd.herman@toddherman.com's Avatar Topic Author
  • Offline
  • Fresh Boarder
  • Fresh Boarder
More
1 month 2 days ago #7954 by todd.herman@toddherman.com
Possible Bug - Whitelist was created by todd.herman@toddherman.com
Jose - this morning, I was reviewing the Web Firewall Logs to see what needed to be addressed. There were 3 new IP addresses new since I last checked. I meant to Blacklist them but I accidentally hit the "Add to Whitelist" button instead.

Once I got to the office, I poked around the tables used by SecCheckPro and found the 3 IP addresses I'd accidentally marked, based on their date/time stamps. (FYI - these were: 103.66.79.217 / 47.244.113.177 / 185.230.127.233 )

When I went into SecCheckPro UI to change these from Whitelist to Blacklist, I noticed there was ONLY 1 IP address in the Blacklist and 0 IP addresses in the Whitelist. Based on the table contents I found, there should be over 1,000 IP addresses between the Blacklist and the Whitelist.

I thought, perhaps, that by inspecting the table in Adminer, I might have messed up something - however, when I saw several mentions of Whitelist and "new database" and new version 3.2 in the forum, I wonder if I've found a bug.

Thoughts?

Thanks,
Todd

Attachments:

Please Log in or Create an account to join the conversation.

More
1 month 2 days ago #7955 by Jose
Replied by Jose on topic Possible Bug - Whitelist
Hi Todd,

Some users have reported the same issue but I have not been able to reproduce it. In theory every update doesn't touch database entries were IPs are stored, so I can't explain why this happens.

The site is not managed by the Control center, is it?

Regards,
Jose

Please Log in or Create an account to join the conversation.

  • todd.herman@toddherman.com
  • todd.herman@toddherman.com's Avatar Topic Author
  • Offline
  • Fresh Boarder
  • Fresh Boarder
More
1 month 2 days ago #7956 by todd.herman@toddherman.com
Replied by todd.herman@toddherman.com on topic Possible Bug - Whitelist
Jose - no, we don't use Control Center - we're only managing our own site.
It seems values (0 or 1) in a particular field distinguish whitelist vs blacklist items. Is your code to build the whitelist and blacklist relying on an index for a lookup? Might the index be corrupt? Just some thoughts on what might be going on.
If you want to poke around on my system, feel free.
Best,
Todd

Please Log in or Create an account to join the conversation.

More
1 month 2 days ago #7957 by Jose
Replied by Jose on topic Possible Bug - Whitelist
Thanks for your offering Todd.

A corrupted index should not cause a case like this as info is stored in json format, but you gave me an idea: an error storing an IP could break the json format and get an empty value as a result. Will do tests in future updates to avoid cases like yours.

Regards and thank you very much for your patience,
Jose

Please Log in or Create an account to join the conversation.

Time to create page: 0.376 seconds
Powered by Kunena Forum

Login or Sign In