[7.902][QUESTION][OPEN] unable to block traffice

Hello Friends !

i have block (drop in pf ) traffic from 85.190.0.3 (please check screen shot from my pf rule)

drop in pf rule, in this case nat should work ?

even after i am able to see lot of traffic from this ip and 2 events of using nat also  for web site access --pls check log

i check this domain and it is used by

Details of 85.190.0.3
IP Address : 85.190.0.3
Location   : Germany (95% accuracy)
Host Name  : proxyscan.freenode.net

i use irc /irc allowed in im/p2p ,i use freenode.net

please check the other log from web server -apache (ubuntu)

friends its just test page  !
now in pf rule i make change from "DROP" TO "REJECT" will inform u

thanks

Parents

0 Astaro Beta Bot over 15 years ago

Astaro Beta Report

--------------------------------

Version: 7.902

Type: QUESTION

State: OPEN

Reporter: utm_kid

Contributor: Billybob

MantisID: 

Target version: 

Fixed in version: 

--------------------------------

0 Billybob over 15 years ago in reply to Astaro Beta Bot

You have a web server published by web application firewall and its bypassing packet filter rules? If that is the case then thats how all applications behave in astaro. Packet filter rules are applied after the application rules and will have no effect at all on traffic.

This probably should be a feature request in application firewall to deny web requests based on IP etc. I think there is a plan for GeoIP blocking for emails. Maybe that can be extended to the web application firewall also?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 utm_kid over 15 years ago in reply to Billybob

yes ,i am trying to configure that way but on apache i was not able to configure vhost so i was under impression WAF not configure ,i will turn off WAF and will try again today

thanks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 utm_kid over 15 years ago in reply to Billybob

yes ,i am trying to configure that way but on apache i was not able to configure vhost so i was under impression WAF not configure ,i will turn off WAF and will try again today

thanks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data