The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

CPHulk configuration

Discussion in 'General Discussion' started by douglatz, Jan 4, 2008.

  1. douglatz

    douglatz Member

    Joined:
    Oct 15, 2007
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    Hi,

    I'm having a lot login attempts on my servers, so I'm trying to tune the CPHulk feature. I haven't been able to find a lot of documentation, so hopefully someone here can help me with this.

    My settings are currently:

    IP Based Brute Force Protection Period in minutes: 1
    Brute Force Protection Period in minutes: 30
    Maximum Failures By Account: 3
    Maximum Failures Per IP: 3
    Maximum Failures Per IP before IP is blocked for two week period: 15
    Extend account lockout time upon additional authentication failures: checked
    Send notification when brute force user is detected: checked

    I'm not sure what the first entry does - the IP Based Brute Force Protection Period ... is it better to have it set low (as it is now), or would increasing it be better. I had one IP address hit me 700 times yesterday, yet it isn't showing up on my list of brutes.

    Thanks!

    Douglas
     
  2. ToddShipway

    ToddShipway Well-Known Member

    Joined:
    Nov 13, 2006
    Messages:
    300
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Houston, TX
    The first setting should be kept in line with the second setting.

    IP Based Brute Force Protection Period in minutes: 1

    Currently this means that if an IP based attack is occurring on the server, the IP will only be locked for 1 minute. Which doesn't help much with an IP based attack.

    The other settings look to be set at a good level.
     
  3. douglatz

    douglatz Member

    Joined:
    Oct 15, 2007
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    Ah - good. Now that makes sense. Thanks
     
  4. botakedan

    botakedan Member

    Joined:
    Sep 23, 2004
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    And, how to see the IP Address ???
     
Loading...

Share This Page