Support

Hello,

I get same problem than Paul in #33955. Everyday my IP changes and everyday i can't access back end. I need to use the rescue mode to unlock.

I tried to follow your instructions but I could not find the "Log security exceptions" setting. Which tab iis it in?

I tried the rescue URL without /administrator but no change.

I installed Admin Tools on 3 sites with same problem except one on which I did not yet insert the download key.

Regards

(I'm laughing.  It is nice to know Nicholas trips over these things too.  I get caught on them all the time.)

Go to Configure WAF, on the Logging and Reporting tab and set "Log blocked requests" - formerly known as "Log security exceptions" - to Yes.

I think the important thing that Nicholas said was in his first reply:

Please note that the documentation of this feature tells you to not enable it if you do not have a static IP address because ISPs do, indeed, change your IP address very often. Some do even on an hourly basis.

Thanks for your answer.

"Log blocked requests was set to yes"

"Allow administrator access only to IPs in Exclusive Allow IP List" was set to No (this is so obvious)

First blocked request of today is

I guess it was the page left open yesterday.

Any idea?

It looks like your session expired.  You can't fix that once and for all but you can reduce the frequency.  Go to Joomla!'s Global Settings and increase the session lifetime.