Good morning. I'm am trying to find out how to/where to look so we can
1. find out what users see when they are blocked by RSFirewall,
2. How to create overrides so we can modify the default RSFirewall messages when users are blocked.

We get a fair number of users (2-3 per day) that are blocked due to being listed on the CBL and would like to provide information to the user so they can go to the CBL lookup and find out why they have been blocked and how to resolve the issue. These users access the site as part of their job so enabling them to fix the issue on their end is important to our business.

Thank you in advance.

Hello,

You can find all RSFirewall! forbidden reason strings originating from the frontend English language file, located under this path:

\language\en-GB\en-GB.com_rsfirewall.ini

The one you're looking for being the following:

COM_RSFIREWALL_DNSBL_LISTED="This form has not been submitted because your IP is listed in a spam database. If you feel this is an error, please contact the webmaster."

Instead of adjusting the file (so you don't have to worry after an update), you can use the standard Joomla! language override feature to provide an entirely different translation using the language constant. Example language constant: COM_RSFIREWALL_EVENT_DNSBL_LISTED