Support

 We are getting emails from our site, RenyersPumpkinFarm.com that say...

=====

Hello,

We would like to notify you that a security exception was detected on your site, Renyer's Pumpkin Farm, with the following details:

IP Address: 68.180.228.106 (IP Lookup: IP Lookup)
Reason: template= in URL

If this kind of security exception repeats itself, please log in to your site's back-end and add this IP address to your Admin Tools's Web Application Firewall feature in order to completely block the misbehaving user.

Best regards,

The Renyer's Pumpkin Farm team

=====

When we go into the Exceptions log we see these types of items:

=====

2015-03-17 17:09:32 68.180.228.106 template= in URL http://renyerspumpkinfarm.com/blogs-events/2012-08-07-20-09-47/icals.icalevent/-?template=component&evid=40

2015-03-17 16:33:07 68.180.228.114 template= in URL http://www.renyerspumpkinfarm.com/blogs-events/2012-08-07-20-09-47/icals.icalevent/-?template=component&evid=87&icf=1

2015-03-17 16:11:19 68.180.228.106 template= in URL http://renyerspumpkinfarm.com/blogs-events/2012-08-07-20-09-47/icals.icalevent/-?template=component&evid=89

2015-03-17 13:31:46 68.180.228.114 template= in URL http://www.renyerspumpkinfarm.com/blogs-events/2012-08-07-20-09-47/icals.icalevent/-?template=component&evid=76

2015-03-17 10:14:49 68.180.228.106 template= in URL http://renyerspumpkinfarm.com/blogs-events/2012-08-07-20-09-47/icals.icalrepeat/-?template=component&evid=24&icf=1

2015-03-17 09:49:25 68.180.228.114 template= in URL http://www.renyerspumpkinfarm.com/blogs-events/2012-08-07-20-09-47/icals.icalevent/-?template=component&evid=75

2015-03-17 08:34:01 68.180.228.114 template= in URL http://www.renyerspumpkinfarm.com/blogs-events/2012-08-07-20-09-47/icals.icalevent/-?template=component&evid=81&icf=1

2015-03-17 07:50:42 68.180.228.114 template= in URL http://www.renyerspumpkinfarm.com/blogs-events/2012-08-07-20-09-47/icals.icalevent/-?template=component&evid=86&icf=1

2015-03-17 07:42:54 68.180.228.114 template= in URL http://www.renyerspumpkinfarm.com/blogs-events/2012-08-07-20-09-47/icals.icalevent/-?template=component&evid=51

2015-03-17 02:46:27 68.180.228.114 template= in URL http://www.renyerspumpkinfarm.com/blogs-events/2012-08-07-20-09-47/icals.icalevent/-?template=component&evid=64

2015-03-17 00:48:53 68.180.228.106 template= in URL http://renyerspumpkinfarm.com/blogs-events/2012-08-07-20-09-47/icals.icalevent/-?template=component&evid=28&icf=1

2015-03-17 00:22:52 68.180.228.106 template= in URL http://renyerspumpkinfarm.com/blogs-events/2012-08-07-20-09-47/icals.icalevent/-?template=component&evid=39

=====

These all look to be legitimate links on our site, how do we write an exceptions exception to keep from blocking users like this?

Thank you!

We can do that. Go to Web Application Firewall, Configure WAF, on the Visual Fingerprinting Protection tab, and enter "component" in the field "List of allowed tmpl= keywords". That should do it.