ElkArte Community

Project Support => Support => Topic started by: IndianTalkZone on March 05, 2016, 02:29:45 am

Title: IP blocked due to multiple failed logins
Post by: IndianTalkZone on March 05, 2016, 02:29:45 am
Is it anything to do with ElkArte, i checked with my host. They said it is due to mod_security and kindly check your .htaccess or disable mod_security. Should i change some files to fix it , problem started 1 week back.
Title: Re: IP blocked due to multiple failed logins
Post by: meetdilip on March 05, 2016, 03:32:42 am
I too got this error.
Title: Re: IP blocked due to multiple failed logins
Post by: Flavio93Zena on March 05, 2016, 03:38:51 am
Just disable mod_security, it serves no purpose on Elkarte.
Title: Re: IP blocked due to multiple failed logins
Post by: IndianTalkZone on March 05, 2016, 03:56:14 am
@Flavio93Zena (#OpIsis) disabling mod_security doesn't compromise security?
Title: Re: IP blocked due to multiple failed logins
Post by: TE on March 05, 2016, 07:05:07 am
IMO there's nothing we can fix in ElkArte's codebase..

It sounds like mod_security is at least not properly configured. Maybe your webhoster can give you some details about why your connection to the server has been blocked (logfiles should give you the reason).
Title: Re: IP blocked due to multiple failed logins
Post by: IndianTalkZone on March 05, 2016, 08:27:33 am
@TE The host said, if i face anymore problem they will check in server error log and let me know.
Title: Re: IP blocked due to multiple failed logins
Post by: Flavio93Zena on March 05, 2016, 02:36:29 pm
Quote from: IndianTalkZone – disabling mod_security doesn't compromise security?
so the answer to your question is no, it won't :P
Title: Re: IP blocked due to multiple failed logins
Post by: Lou on March 06, 2016, 11:06:53 am
Quote from: IndianTalkZone – @TE The host said, if i face anymore problem they will check in server error log and let me know.
Have you looked in your cPanel or equivalent Error logs and Visitor logs. Might find an IP that is pounding your site. Look in BadBehaviour and see what is there. Find a common IP address and ban it and see what happens.

Mod_security is a bane for users. Great for servers, bad for users. You might could disable it in .htacess if the host compiled it to permit that action.
Title: Re: IP blocked due to multiple failed logins
Post by: Flavio93Zena on March 06, 2016, 11:13:11 am
Disabling mod_security via htaccess doesn't always work, but doing it via the cPanel, does, when there is such option :P
Title: Re: IP blocked due to multiple failed logins
Post by: Flavio93Zena on March 07, 2016, 03:27:41 am
No, having mod_security active by default doesn't mean you are on a crappy host. Not having the option to disable it, not even on request, instead, definitely means it's a crappy host.
Title: Re: IP blocked due to multiple failed logins
Post by: Flavio93Zena on March 07, 2016, 02:53:19 pm
You said IF you face furhter problems, IF.
Title: Re: IP blocked due to multiple failed logins
Post by: emanuele on March 07, 2016, 03:48:47 pm
The first sentence is from IndianTalkZone's host, not something said by derived.
Title: Re: IP blocked due to multiple failed logins
Post by: Flavio93Zena on March 07, 2016, 04:39:46 pm
My typo on the "you", should have said "he" :D
Title: Re: IP blocked due to multiple failed logins
Post by: IndianTalkZone on March 08, 2016, 01:59:00 am
Sorry for the delayed reply, my host gives me the option to disable mod_security. They also said kindly notify us if you face any problem, so that we can fix it and they asked me to check with site settings. That's why i dropped a help thread here.

Now i am clear that Elkarte has no issue (but still have a doubt because of the transition from MyBB to Elkarte, some mistake i could have done).
Title: Re: IP blocked due to multiple failed logins
Post by: Flavio93Zena on March 08, 2016, 06:09:01 pm
Disable and be done with it :)