I'll start trying to configure the Firewall for less blocks while posting or editing but I will need members to assist by providing their RayID when it happens.
The RayID is at the bottom of the block page. DO NOT SEND ME SCREENSHOTS. I want it in text form only please.
Here is an example of the block page which unfortunately the member didn't include the rayID.
https://i.imgur.com/7DBKbYv.jpg
I'll try to adjust the firewall so that this occurs less.
Jun 8, 2016 07:22 AM
(This post was last modified: Jun 8, 2016 07:25 AM by Cryptic™.)
This has been so annoying, happened to me yesterday. Going to replicate it and send you the rayID shortly.
Edit: Sent RayID via PM
Thanks for letting us know.
If I have this issue again, I'll send you the rayId.
Seems like a lot of users are having this issue lately indeed.
Good to know you're working on this so this will not occur as much as before.
Signature space for rent. Send me a PM or buy it here.
RayID allows me to lookup the actual block in Cloudflare which will provide me the exact rule being triggered. I can then decide if I want to turn that rule off and what adjustments I can realistically make without reducing our security too much. Some of Cloudflare security is redundant to what I already run on HF. Plus I already know we're secure from SQLi and XSS at least for right now.
One concern is when we upgrade to MyBB 1.8x. Likely I'll enable all rules at least for a short time.
I'll try to do a better job of cataloging my custom edits to the rules. Cloudflare has literally hundreds of toggles right now to enabled/disable. During the fake dump I had all rules enabled. Undoing that is going to be a bitch.
DO NOT DEAL WITH THIS MEMBER
You want this on every event, or only once?
Does the ray ID change at all?
Ive PMed you about this previously, will gladly provide what I can to help fix it, its damn annoying.
If I encounter this issue, I will send you the ray id.
Should I private message you the ray id, or just post it here?
DO NOT DEAL WITH THIS MEMBER
I've been offline today, hopefully this issue has been partly resolved but if I get any blocks I'll send ID's.
Finally! I'll be sure to send you some ray-id's lol.
af
DO NOT DEAL WITH THIS MEMBER
Jun 8, 2016 06:43 PM
(This post was last modified: Jun 8, 2016 06:45 PM by Mr. WAVES.)
Let me try some XSS:
Code BLOCKED(2b00e4f424b33fcb): <[]ript >alert('123')</ st >
Let me try some XSS:
Code BLOCKED(2b00e4f424b33fcb): <[]ript >alert('123')</ st >
Blocked2: < s..cr..ipt> (no dots, no space)
As soon as I come into this problem I'll throw you the RAYID boss.
SneakyBoots Discord or HF convo me.
DO NOT DEAL WITH THIS MEMBER
Who is ray and why do you want his ID?
OT: I do get these quite often, especially when sending PM's that quote lots of links.
I sent this to omni yesterday, Thank you so much for creating a thread about it omni. <3. I had a lot trouble editing my thread yesterday and this literally happened 30-40 times throughout the day.
I did not send the rayID as I did not know if That's what I should have sent instead.
Thank you for the update omni.
(Jun 8, 2016 12:53 PM)TheWHO? Wrote: Should I private message you the ray id, or just post it here?
Prefer a PM I suppose. Would make communicating easier and more private.
|