Support

I am getting locked out of my Joomla admin page. I have gone through the Troubleshooter page.

https://www.akeebabackup.com/documentation/troubleshooter/atwafissues.html

It does not fix anything permanently. I have tried another browser just to check. I use Opera browser and I use the VPN. I can login when I change the VPN to another IP. Using whatsmyip.com I can find the IP of my current location which has been blocked but it doesn't show up in any of the blocking lists. It does appear in the Security Exceptions log.

I use Admin Tools on several sites and don't have the problem elsewhere. Just my personal site.

Can't figure this one out.

Duane Mitchell

Duane,

What does the Security Exceptions Log tell you? That's the piece that we need to figure out and fix.

Attached is a screen shot of the pertinent part of the log. I assume the most recent entry is because I tried to login without using the secret word. Now that IP appears to be blocked. The second shows the IP of my current location as discovered by whatsmyip. I understand about the login failure for failed attempts but not sure why this does not appear in any blocked list?

First of all, it is really annoying when your own security locks you out of your site. You can bypass the block by disabling Admin Tools with the instructions here: https://www.akeebabackup.com/documentation/troubleshooter/atwafissues.html. That will get you back in and allow you to clear the block.

If your IP has been blocked temporarily, it should show up in Web Application Firewall, Auto IP Blocking Administration. To clear it, you must delete it from there, Auto IP Blocking History, and from the Security Exceptions Log. I f you don't clear them all, you'll just get blocked again. The other place it could be is Site IP Blacklist. That's where it goes when it has been temporarily blocked too many times or you manually put a permanent block on it.

I've returned to my office and it's all working fine now. I'm not sure what might have happened. The IP address is now listed in the Auto IP Blocking list as well as in the Security Exceptions Log. It always was in the latter.

So I don't know if maybe I missed it in the Auto IP Blocking list? Or maybe there was a delay of some sort for it to make it into the listing? Not sure? I most likely missed it but I sure checked everything multiple times. I'll see what happens next time I go there.

Thanks for you help. This can be marked closed.

You're welcome!

If you get into a strange situation like that again, please clear your browser cache. It is possible that the list without your IP was cached and didn't update properly.