How can I block an URL?

khanhpkvn

Hi aaPanel,

I'm using WordPress and I want to block the URL like this: https://domain.com/xmlrpc.php for all my websites.
I have added it in WAF > URL Backlist, but this URL still can be access. What need I do?
Thank you so much!

aaPanel_Kern

khanhpkvn
Hello, my test is normal, I can intercept it and return "403 Forbidden", please check whether the WAF is valid.

If it doesn't work, please reinstall WAF. Be careful to check for errors during installation. cat /tmp/panelShell

khanhpkvn

Still not working sir 🙁

Free

khanhpkvn in vhost domain you can add the following rule

location = /xmlrpc.php {
deny all;
}

aaPanel_Kern

khanhpkvn
Hi, does "Simulated attack" work??

Is your ip in the "IP whitelist"? If there is, it will be invalid for the ip in the "IP whitelist"

khanhpkvn

Free But, Nginx WAF Pro can't do that? 😮

Free

khanhpkvn on aapanel I did not use Nginx WAF Pro

khanhpkvn

aaPanel_Kern What does this mean? I click Attack, and my website is open fine.
My problem is after I use URL Blacklist feature of Nginx WAF Pro. I use browser and access to the https://domain.com/xmlrpc.php success!
When I use proxy, fake IP, browserling.com to test this URL, it's working fine, not block 🙁

aaPanel_Kern

khanhpkvn
First check if the WAF is working as I said

khanhpkvn

Oh, WAF not working on my second VPS, it's working fine on my another VPS. What happen?

aaPanel_Kern

khanhpkvn
Reinstall WAF. Check for errors during installation.
cat /tmp/panelShell

khanhpkvn

aaPanel_Kern cat /tmp/panelShell
No such file or directory.

khanhpkvn

Before this, I used WAF Free, everything working fine.
Today, I upgrade to WAF Pro. I uninstall WAF Free and install WAF Pro.
Then, the problem has appeared from that.
I try reinstall WAF Pro (and WAF Free), all of WAF not working again.
No IP in Whitelist.

aaPanel_Kern

khanhpkvn
Hello, WAF only supports installing one. sorry for the typo
/tmp/panelShell.pl

aaPanel_Kern

khanhpkvn
If it can't be solved, can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com.
It is recommended to fill in the following
Post link:
SSH account password and port:
aapanel login link address and account password:

khanhpkvn

--2022-06-02 16:41:25-- https://node.aapanel.com/btwaf_rule_aapanel/bt_waf/btwaf_en.zip
Resolving node.aapanel.com (node.aapanel.com)... 104.21.79.196, 172.67.171.7, 2606:4700:3034::ac43:ab07, ...
Connecting to node.aapanel.com (node.aapanel.com)|104.21.79.196|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 815221 (796K) [application/zip]
Saving to: ‘/www/server/panel/plugin/btwaf/btwaf.zip’

 0K .......... .......... .......... .......... ..........  6% 30.4M 0s
50K .......... .......... .......... .......... .......... 12% 36.1M 0s

100K .......... .......... .......... .......... .......... 18% 35.1M 0s
150K .......... .......... .......... .......... .......... 25% 43.5M 0s
200K .......... .......... .......... .......... .......... 31% 179M 0s
250K .......... .......... .......... .......... .......... 37% 213M 0s
300K .......... .......... .......... .......... .......... 43% 341M 0s
350K .......... .......... .......... .......... .......... 50% 299M 0s
400K .......... .......... .......... .......... .......... 56% 108M 0s
450K .......... .......... .......... .......... .......... 62% 244M 0s
500K .......... .......... .......... .......... .......... 69% 370M 0s
550K .......... .......... .......... .......... .......... 75% 19.0M 0s
600K .......... .......... .......... .......... .......... 81% 239M 0s
650K .......... .......... .......... .......... .......... 87% 328M 0s
700K .......... .......... .......... .......... .......... 94% 361M 0s
750K .......... .......... .......... .......... ...... 100% 292M=0.01s

2022-06-02 16:41:25 (75.6 MB/s) - ‘/www/server/panel/plugin/btwaf/btwaf.zip’ saved [815221/815221]

mkdir: cannot create directory ‘/www/server/btwaf/total’: File exists
/tmp/btwaf.sh: line 561: /usr/bin/python: No such file or directory
转换ip格式
转换ip格式
chown: cannot access '/www/server/btwaf/totla_db/totla_db.db': No such file or directory
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
Stoping nginx... nginx: [emerg] "fastcgi_cache_key" directive is duplicate in /www/server/nginx/conf/nginx.conf:101
failed. Use force-quit
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
Starting nginx... nginx (pid 53908 53907 53906 6239) already running.
/tmp/btwaf.sh: line 610: cd: /www/server/btwaf/bt_ipfilter: No such file or directory
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
bash: bt_ipfilter_install.sh: No such file or directory
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
bash: bt_ipfilter_install.sh: No such file or directory
shell-init: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
chdir: error retrieving current directory: getcwd: cannot access parent directories: No such file or directory
Starting Bt-Panel... Bt-Panel (pid 81696) already running
Starting Bt-Tasks... Bt-Tasks (pid 81717) already running

aaPanel_Kern

khanhpkvn
Hello, what is your system, is it aarch64? Is it normal now?

khanhpkvn

aaPanel_Kern Ubuntu 20.04, My VPS working fine, all my sites are working fine, sir!