Bitninja and OpenLiteSpeed WAF issue

imadsani

Hello,

I am having issues with WAF when I try to run a website on openlitespeed with Bitninja. Bitninja doesn't kick in when I try the test WAF url: /?test=/etc/passwd

I tried talking to Bitninja support but they say that Litespeed WAF is enabled on the server which is interfering with their config. I tried going through the enhance panel as well as OLS admin but I can't seem to find any option for a WAF.

Everything works when I switch the webserver to Apache.

Any ideas?

mrEckendonk

imadsani I am having issues with WAF when I try to run a website on openlitespeed with Bitninja. Bitninja doesn't kick in when I try the test WAF url: /?test=/etc/passwd

Hey,

I have set it up, using WAF3.0 (currently Feature Beta) and with OLS you need to test with /?bitninja-quality-assurance-test=waf on the server IP. The reason the password test doesn't work is that your Litespeed firewall is enabled already.
Keep in mind if you whitelisted your IP, you might want to remove that before testing.

Also, now TLS1.3 works fine for all devices (even Apple).

bluelinq-computers

Simple solution; don't use Bitninja. cPGuard / cPFence is the way to go, much better WAF & IPDB protection.

elcapitanph

Hello , I'm using bitninja and cpFence did you also check your Interface you need to configure that too for ipv4 and ipv6 second you need to go to advance module and find the Set up your backend server (choose openlitespeed) Note when a website renew the ssl you need to manually restart your bitninja. or you need to wait 10min so bitninja refresh the certificate

imadsani

Wanted to update the thread, Bitninja support fixed the issue and pointed me to a support doc that needs to be followed for this config:

https://knowledgebase.bitninja.io/kb/configuring-bitninja-under-enhance-control-panel/

imadsani

I gave up on Bitninja because, I was running cloudflare in front of Enhance and I started getting captcha pages, couldn't get rid of them. The site I was running was for a high profile organization so I couldn't afford any more downtime (I spent 5 hours trying to troubleshoot the issues). Eventually back to cpGuard, haven't experienced any issue since.

I wouldn't put all the blame on Bitninja, because I remember I was having issues with trying to keep proxy IPs in the OLS config and I wasn't able to test cpForce.

mrEckendonk

All popular CDNs are currently in the dashboard of Bitninja as Trusted Proxy. The API integration with cloudflare is also nice. Under the security tab, WAF -> Tools, you see automated "[Added by BitNinja]: automatically added by BitNinja" you server IP's or you added whitelisted IP, ASN or Countries.

As mentioned, I run the "Feature Beta' and issues may arise if using any Beta but for now it seems fine with OLS.