Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED Configserver deny listing IPs blacklisted by cPHulk Country blocks?

Discussion in 'Security' started by willke, May 22, 2018.

Tags:
  1. willke

    willke Well-Known Member

    Joined:
    Mar 30, 2005
    Messages:
    62
    Likes Received:
    3
    Trophy Points:
    158
    Hi,

    Noticed an unanswered thread over on Configserver forum which also applies to me. My Configserver "deny list" includes IPs which should have been blocked by cPHulk Country blacklists - is there an order of precedence in operation here where cPHulk Country blacklists only kick-in AFTER Configserver rules?

    Will
     
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello Will,

    The Countries Management feature with cPHulk Brute Force Protection lists countries that you can whitelist, blacklist, or remove from either list. The whitelist specifies the IP addresses that cPHulk always allows to log in to your server. The blacklist specifies the IP addresses that cPHulk never allows to log in to your server. It's not actually blocking these IP addresses at the firewall. Instead, it's used to determine if the login attempt will succeed. Thus, CSF/LFD may still detect the login failures since the authentication attempt itself isn't blocked.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. willke

    willke Well-Known Member

    Joined:
    Mar 30, 2005
    Messages:
    62
    Likes Received:
    3
    Trophy Points:
    158
    Thanks, Michael.
     
    cPanelMichael likes this.
  4. Glen Schaefer

    Glen Schaefer Registered

    Joined:
    Nov 24, 2015
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    SCotts Head, NSW
    cPanel Access Level:
    Root Administrator
    Attacks from Russia and China are still showing up despite adding them to the country block list. Is there a way to update the IP address ranges listed for these countries?
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice