Hi
We find such bag - we try to upload file from our Admin Panel.
When try to upload we get ERR_HTTP2_PROTOCOL_ERROR in browser and site stop working.
We got to aawaf admin panel to check maybe it block me? But we cant find any record in Interception log in all tabs (Protection record, IP blocking record)
We got to server and make iptables-save and found there is rule that linked to ipset list name bt_ip_filter
In bt_ip_filter we found my IP.
So as we understand - aawaf block me, but does not logged in admin panel it.
We repeat this action several times - each time we get blocked.
Several question
- Where can we find logs that add IP to bt_ip_filter?
- We have entered Black List of IPs in aawaf admin panel - but this IP does noe apear in bt_ip_filter - so there is different ways of blocking IPs?
- Where can we find error log of aawaf? maybe while uploading this file there is some error that occurs and block adding info in aawaf admin panel in Interception log?
We are scared that there is a lot such blocking that we dont khow because there is no info in Interception log