Page 1 of 2

cpanel/webmail accesses blocked

Posted: 02 Oct 2007, 10:10
by xperience
Hi,

Which option would I need to change to increase the number of failed cpanel/webmail logins allowed?

Some of our customers are not so bright and keep getting their IP's blocked!

Cheers

Simon

Posted: 02 Oct 2007, 12:48
by Infopro
# Set the number of login failures that trigger the blocking of the IP

Posted: 02 Oct 2007, 18:09
by xperience
hmm - I couldn't find that option.

I have:

# [*]Enable login failure detection of cpanel, webmail and whm connections
LF_CPANEL = 15
LF_CPANEL_PERM = 1

Should that be it?

Simon

Posted: 04 Oct 2007, 11:09
by Infopro
You can do a seach on the page from your browser and you should find it.
In IE, edit > find on this page
Paste the entire line in;

# Set the number of login failures that trigger the blocking of the IP

BTW, your LF_CPANEL = 15 should be set to a 1.

Posted: 05 Oct 2007, 11:53
by xperience
Hi,

I've checked the Firewall configuration in WHM again and that line's definately not there!

What am I doing wrong?!

Simon

Posted: 06 Oct 2007, 08:56
by Infopro
What version are you running?

Changelog; http://www.configserver.com/free/csf/changelog.txt

Posted: 08 Oct 2007, 16:48
by lehels
Related to this subject:
What option do we have to fulfill a clients request, he wants to block all access to cPanel/Webmail for his domain, and let some IP-s to be able to connect,

Thank you,

xperience: if you are running the latest CSF [and why you wouldn't?] than you should see in the configuration [csf.conf] that option,

Posted: 08 Oct 2007, 22:45
by Infopro
Block access to webmail? Isn't it already blocked by default? Or do you mean block all mail period?

Posted: 09 Oct 2007, 12:28
by lehels
Infopro wrote:Block access to webmail? Isn't it already blocked by default? Or do you mean block all mail period?
I mean i have employees in an office, and i want to be accesible webmail just from that office, not elsewhere.
I thought if it would be possible to specify for a domain a few IPs to be accessible,

Posted: 15 Oct 2007, 09:31
by chirpy
You would need to remove the appropriate ports from TCP_IN and then add individual IP's to csf.allow to permit them access to those ports.