Hi @dimalifragis, thanks for your question.
Is the plugin you’re using to empty the User-Agent also sending blank Referer headers as both must be missing from the request for this blocking rule to take effect. Which specific POST requests are you making during this time?
If you were to temporarily log “ALL TRAFFIC” on your Live Traffic page and perform one of these POST requests, you may see whether the site thinks the User-Agent and/or Referer is blank. If both are blank, could you share a screenshot of the expanded Live Traffic entry so we can look into why this setting may not be behaving as expected?
Thanks,
Peter.
Hi Peter,
So both must happen, empty user agent AND referer. All the attacks we get only have empty user agent, not sure about the referer.
I guess i will have to use .htaccess for that.
Thank you