Bitninja and OpenLiteSpeed WAF issue

imadsani

Hello,

I am having issues with WAF when I try to run a website on openlitespeed with Bitninja. Bitninja doesn't kick in when I try the test WAF url: /?test=/etc/passwd

I tried talking to Bitninja support but they say that Litespeed WAF is enabled on the server which is interfering with their config. I tried going through the enhance panel as well as OLS admin but I can't seem to find any option for a WAF.

Everything works when I switch the webserver to Apache.

Any ideas?

bluelinq-computers

Simple solution; don't use Bitninja. cPGuard / cPFence is the way to go, much better WAF & IPDB protection.

elcapitanph

Hello , I'm using bitninja and cpFence did you also check your Interface you need to configure that too for ipv4 and ipv6 second you need to go to advance module and find the Set up your backend server (choose openlitespeed) Note when a website renew the ssl you need to manually restart your bitninja. or you need to wait 10min so bitninja refresh the certificate

imadsani

Wanted to update the thread, Bitninja support fixed the issue and pointed me to a support doc that needs to be followed for this config:

https://knowledgebase.bitninja.io/kb/configuring-bitninja-under-enhance-control-panel/