cPHulk Configuration Question

[tommyxv]

Maybe I don't understand how cPHulk is suppose to work. If have for example Russia blacklisted under the Countries, and I have

Maximum Failures per IP Address set to 3
Maximum Failures by Account set to 3
Maximum Failures per IP Address before the IP Address is Blocked for One Day set to 4

Why can the same IP continue to try more login attempts after 3 or 4 tries when they get blocked.

 

[cPanelMichael]

Hello @tommyxv,

In cPanel & WHM version 80, the scenario you described should indeed block the IP address at the firewall level per the following case:

Fixed case CPANEL-26736: Ensure cphulkd adds IPs to iptables when blacklisted ips attempt login when iptables support is enabled.

If that's not working on your system, feel free to open a support ticket so we can take a closer look. You can post the ticket number here and we'll link this thread to it.

Thank you.