Replies: 0
I created a ftp account that accesses a directory below my public_html directory. Any time I try to log into it I am immediately disconnected. On my recently blocked attacks this is listed:
x.x.x.x (United States)
Blocked for LFI: Local File Inclusion in query string: dir=/home/xxx/xxx
I temporarily disabled “LFI: Local File Inclusion” on the firewall settings page and I was then able to connect. I tried turning on learning mode and connecting but it continued blocking me. I also tried to create a white list but was unsuccessful. I don’t want to leave LFI permanently disabled, how can I add a white list to allow ftp access to this specific directory but still maintain protection from LFI attacks?