This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Moodle on IIS

I've got a Moodle installed on IIS. Working via DNAT works fine but as soon as I implement WAF, it breaks all the CSS.  Anyone have any thoughts on why this might be?


This thread was automatically locked due to age.
  • WAF needs to be tuned to your specific site.  False positives are being triggered.  Check the log to get the Rule IDs being triggered, then add those to the Skip Filter Rules List.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • I've checked for this and added the one entry in from the log but I'm still not getting the website displaying properly.
  • I've got a feeling this is something to do with http to https redirection but I can't work out quite what's going on.  There's a setting within Moodle to redirect to https at login.  I'm guessing this may be the issue? - i'll report back after some more troubleshooting.
  • Still not getting anywhere with this.  In the logs I'm getting 301 and 304 errors - any ideas if this could be part of the problem?
  • Hi,

    could you please post the corresponding logs (with blackened personal data)?

    Sabine
  • Hi Sabine,

    Here's what's in the logs, with the IPs etc ***'d out:

    2014:11:11-09:39:23 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="298" user="-" host="xx.xx.xx.xx" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="331" url="/theme/yui_combo.php" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:23 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="277" user="-" host="xx.xx.xx.xx" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="309" url="/theme/styles.php/clean/1405428546/all" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:23 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="334" user="-" host="xx.xx.xx.xx" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="314" url="/theme/yui_combo.php" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:23 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="294" user="-" host="xx.xx.xx.xx" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="329" url="/lib/javascript.php/1405425475/lib/javascript-static.js" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:23 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="282" user="-" host="xx.xx.xx.xx" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="309" url="/theme/image.php/clean/core/1405428546/help" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:23 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="0" user="-" host="xx.xx.xx.xx" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="10265" url="/theme/yui_combo.php" server="example.domain" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:23 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="284" user="-" host="xx.xx.xx.xx" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="249" url="/theme/javascript.php/clean/1405428546/footer" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:23 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="10051" user="-" host="xx.xx.xx.xx" method="GET" statuscode="200" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="44762" url="/lib/javascript.php/1405425475/lib/javascript-static.js" server="example.domain" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:23 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="0" user="-" host="xx.xx.xx.xx" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="18076" url="/theme/image.php/clean/core/1405428546/help" server="example.domain" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:23 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="84868" user="-" host="xx.xx.xx.xx" method="GET" statuscode="200" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="110661" url="/theme/styles.php/clean/1405428546/all" server="example.domain" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:38 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="5487" user="-" host="xx.xx.xx.xx" method="GET" statuscode="200" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="382188" url="/login/index.php" server="example.domain" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:38 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="298" user="-" host="xx.xx.xx.xx" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="285" url="/theme/yui_combo.php" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:38 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="277" user="-" host="xx.xx.xx.xx" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="358" url="/theme/styles.php/clean/1405428546/all" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:38 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="334" user="-" host="xx.xx.xx.xx" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="269" url="/theme/yui_combo.php" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:38 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="294" user="-" host="xx.xx.xx.xx" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="247" url="/lib/javascript.php/1405425475/lib/javascript-static.js" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:39 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="282" user="-" host="xx.xx.xx.xx" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="244" url="/theme/image.php/clean/core/1405428546/help" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:39 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="0" user="-" host="xx.xx.xx.xx" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="10532" url="/theme/yui_combo.php" server="example.domain" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:39 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="0" user="-" host="xx.xx.xx.xx" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="17869" url="/theme/image.php/clean/core/1405428546/help" server="example.domain" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:39 utm reverseproxy: id="0299" srcip="xx.xx.xx.xx" localip="xx.xx.xx.xx" size="84868" user="-" host="xx.xx.xx.xx" method="GET" statuscode="200" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="106510" url="/theme/styles.php/clean/1405428546/all" server="example.domain" referer="-" cookie="__cfduid=d76839a57ee058374521cb20aa899fe0c1391607240313; __utma=60618031.1088298110.1396523926.1415029147.1415635569.4; __utmz=60618031.1415029147.3.2.utmcsr=webserver1|utmccn=(referral)|utmcmd=referral|utmcct=/drupal/; MoodleSession=0duivv79ep4vo79cbnr5me3185" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="12314" user="-" host="10.1.0.192" method="GET" statuscode="200" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="1017368" url="/course/view.php" server="example.domain" referer="example.domain/.../view.php
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="284" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="1054" url="/theme/image.php/clean/core/1405428546/spacer" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="283" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="856" url="/theme/image.php/clean/forum/1405428546/icon" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="284" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="818" url="/theme/image.php/clean/folder/1405428546/icon" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="291" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="994" url="/theme/image.php/clean/core/1405428546/f/document-24" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="293" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="891" url="/theme/image.php/clean/core/1405428546/f/powerpoint-24" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="294" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="791" url="/theme/image.php/clean/core/1405428546/i/navigationitem" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="11413" url="/theme/image.php/clean/core/1405428546/spacer" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="14676" url="/theme/image.php/clean/core/1405428546/f/document-24" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="33296" url="/theme/image.php/clean/folder/1405428546/icon" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="40207" url="/theme/image.php/clean/forum/1405428546/icon" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="285" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="955" url="/theme/image.php/clean/core/1405428546/i/badge" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="283" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="1155" url="/theme/image.php/clean/core/1405428546/i/rss" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="284" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="877" url="/theme/image.php/clean/core/1405428546/i/edit" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="290" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="1012" url="/theme/image.php/clean/core/1405428546/i/enrolusers" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="288" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="1095" url="/theme/image.php/clean/core/1405428546/i/settings" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="11293" url="/theme/image.php/clean/core/1405428546/f/powerpoint-24" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="285" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="936" url="/theme/image.php/clean/core/1405428546/i/group" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="10089" url="/theme/image.php/clean/core/1405428546/i/navigationitem" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="9980" url="/theme/image.php/clean/core/1405428546/i/badge" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="11362" url="/theme/image.php/clean/core/1405428546/i/rss" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="11391" url="/theme/image.php/clean/core/1405428546/i/edit" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="286" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="1008" url="/theme/image.php/clean/core/1405428546/i/filter" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="296" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="1206" url="/theme/image.php/clean/core/1405428546/i/checkpermissions" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="291" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="1037" url="/theme/image.php/clean/core/1405428546/i/assignroles" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="286" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="814" url="/theme/image.php/clean/core/1405428546/i/report" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="23690" url="/theme/image.php/clean/core/1405428546/i/enrolusers" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="286" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="958" url="/theme/image.php/clean/core/1405428546/i/grades" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="286" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="911" url="/theme/image.php/clean/core/1405428546/i/backup" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="24105" url="/theme/image.php/clean/core/1405428546/i/group" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="32351" url="/theme/image.php/clean/core/1405428546/i/settings" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="10567" url="/theme/image.php/clean/core/1405428546/i/checkpermissions" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="11675" url="/theme/image.php/clean/core/1405428546/i/filter" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="10955" url="/theme/image.php/clean/core/1405428546/i/assignroles" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="9921" url="/theme/image.php/clean/core/1405428546/i/report" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="0" user="-" host="10.1.0.192" method="GET" statuscode="304" reason="-" extra="-" exceptions="SkipBlacklistDNSRBL, SkipBlacklistGeoIP, SkipAntiVirus, SkipURLHardening, SkipFormHardening, SkipCookieSigning, SkipThreatsFilter" time="11078" url="/theme/image.php/clean/core/1405428546/i/grades" server="example.domain" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="287" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="966" url="/theme/image.php/clean/core/1405428546/i/restore" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"
    2014:11:11-09:39:44 utm reverseproxy: id="0299" srcip="10.1.0.192" localip="xx.xx.xx.xx" size="286" user="-" host="10.1.0.192" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="936" url="/theme/image.php/clean/core/1405428546/i/return" server="REF_RevFroMoodlVirtuServe_redirect_ssl" referer="-" cookie="__cfduid=d10da9e8604cce43b407900583757c13f1412690243758; __utmt=1; __utma=60618031.1990903917.1410944307.1415269769.1415698404.12; __utmb=60618031.1.10.1415698404; __utmc=60618031; __utmz=60618031.1415269769.11.6.utmcsr=twitterfeed|utmccn=(not%20set)|utmcmd=twitter; MoodleSession=4c3fekotilcbrfmvvf54sl0gm6" set-cookie="-"



    Thanks,

    Michael
  • Have you configured your real webserver with HTTPS in the WAF config?
  • Did you solve this?

    I have the same problem. I think it's due to the fact that I enabled HTTPS for the login in moodle. So whenever you go to the site, moodle redirects to https for the login and back to http after login.

    I have tried configuring the Sophos to only publish the server (without any WAF profile) and it doesn't work, it seems it skips CSS. Logs don't show any rules being applied, which is normal since i'm not applying any profile.

    Anyone know how to solve this?
    Thank you in advanced!
  • I forgot to mention that we are seeing this issue without IIS, we are using XAMP's Apache.