Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

cPHulk Countries Management: Any Performance Penalty?

Discussion in 'Security' started by linux4me2, May 10, 2018.

Tags:
  1. linux4me2

    linux4me2 Well-Known Member

    Joined:
    Aug 21, 2015
    Messages:
    201
    Likes Received:
    47
    Trophy Points:
    28
    Location:
    USA
    cPanel Access Level:
    Root Administrator
    I love the new Countries Management feature in v. 70 CPHulk!

    Is there any performance penalty based on the number of countries blacklisted? It seems like ideally one would block all the countries except the one(s) where clients live.
     
  2. cPanelNick

    cPanelNick Administrator
    Staff Member

    Joined:
    Mar 9, 2015
    Messages:
    3,480
    Likes Received:
    30
    Trophy Points:
    158
    cPanel Access Level:
    DataCenter Provider
    Quite a bit of work has gone into make sure it performs well. One of the big impediments to adding is sooner was resolving the performance concerns. In the released version, the matching is very fast and has a high-performance cache layer so it shouldn't cause any significant slowdowns.
     
    linux4me2 likes this.
  3. linux4me2

    linux4me2 Well-Known Member

    Joined:
    Aug 21, 2015
    Messages:
    201
    Likes Received:
    47
    Trophy Points:
    28
    Location:
    USA
    cPanel Access Level:
    Root Administrator
    Thanks for the info. I have every country blocked but the one my clients are from, and so far, I haven't noticed any issues with degraded performance. There has been a huge reduction in blocked logins. I went from getting hundreds a day to none since I enabled the country blocks.
     
    cPanelMichael likes this.
  4. A Citizen

    A Citizen Registered

    Joined:
    May 12, 2018
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    USA
    cPanel Access Level:
    Root Administrator
    I have a question related to this but not the same

    In my use case all users on the back end are in one country but web site users (people who see website or email clients on this server) could be from anywhere in the world

    So if i black list all but for example usa and undefined would Japan be able see my websites and email me or would they be blocked too?
     
  5. linux4me2

    linux4me2 Well-Known Member

    Joined:
    Aug 21, 2015
    Messages:
    201
    Likes Received:
    47
    Trophy Points:
    28
    Location:
    USA
    cPanel Access Level:
    Root Administrator
    The cPHulk Brute Force Protection documentation states that cPHulk monitors the following web servers and services:
    • cPanel services (Port 2083).
    • WHM services (Port 2087).
    • Mail services (Dovecot and Exim).
    • The PureFTPd service.
    • Secure Shell (SSH) access.
    The way I interpret that, if you block all countries but the USA, people in Japan would be able to browse your web sites and email you using their own mail servers, but they would not be able to log on to cPanel, WHM, PureFTPd, SSH, or use your mail server to send and receive email.
     
    cPanelMichael likes this.
  6. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,749
    Likes Received:
    1,885
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello @A Citizen,

    The previous post is correct. The settings you configure for the cPHulk Brute Force Protection feature won't affect the ability for visitors to access websites hosted on your server or the ability for them to send emails to your server.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice