The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

User being blocked.

Discussion in 'Security' started by yamaharr1, Nov 15, 2012.

  1. yamaharr1

    yamaharr1 Well-Known Member

    Joined:
    Jun 22, 2007
    Messages:
    91
    Likes Received:
    0
    Trophy Points:
    6
    I have a user who is checking their email through their Android, they are checking two different (domains) accounts.

    When they do this the firewall blocks them for flooding, would this be normal because it is the same application but accessing two different email domains?

    Only 1 of the 2 domains is getting blocked, I am guessing the first domain receives its email then the second domain goes to check its email but the first domain hasn't yet closed the connection and gets flag for flooding.

    Has anyone else ran into this?
     
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,480
    Likes Received:
    203
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    You might want to check your firewall settings against what the log files tells you as to why the user is getting blocked. The settings here might also be useful to know about I think:
    WHM » Service Configuration » Mailserver Configuration
     
  3. yamaharr1

    yamaharr1 Well-Known Member

    Joined:
    Jun 22, 2007
    Messages:
    91
    Likes Received:
    0
    Trophy Points:
    6
    It says for flooding,
    Logins: 61
    Interval: 1566
    Allowable: 60 logins per hour in 3600 second interval

    They are using a WIFI connection if that helps at all
     
  4. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,480
    Likes Received:
    203
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    There's your answer.

    In your CSF firewall, find this section:

    SO, you can either edit that, or leave it, your call. ;)
     
  5. yamaharr1

    yamaharr1 Well-Known Member

    Joined:
    Jun 22, 2007
    Messages:
    91
    Likes Received:
    0
    Trophy Points:
    6
    Yes it would be the answer if they were actually logging in 61 times in 3600 seconds but as mentioned above they are logging in 1 time in 2 different emails.

    Changing that setting will only raise the value, it won't fix the root cause, so next they will be blocked at 81 times per 3600 seconds.

    I know what is happening I just don't know why it is happening, they log into other peoples hosting with the same firewall but they don't get blocked and my settings are stock settings as suggested by the firewall.
     
Loading...

Share This Page