Support

Greetings & Hallucinations,

Wondering if the following set up makes sense to you.

I have user registration turned off. I manually set up the users. I also have "Treat Failed Logins as security exceptions" set to NO. I do have Project Honeypot enabled.

Would it be feasible to set the Auto Ban Repeat Offender settings as follows:

Block after 1 attack in 20 seconds
Block for this long 2 days

Or would that cause too much strain on my web site. I do have more than 25,000 articles.

In this case, the time value doesn't make any difference because you are banning the IP after just one "attack". I'm worried that a legitimate user may get banned because of a typo, but I can't think of an example of how that could happen. I would be more comfortable with two attacks in forty seconds or three in a minute.

Try it. There is no one right answer. If it works for your site, then that's fine. Keep in mind that if one legitimate user tracks you down and asks why they are banned from your site, there are ten more that didn't bother. At that point, you know you have to loosen it up a bit.

Thanks Dale.

Remember I have Treat Failed Logins as Security Exceptions set to NO. Doesn't that mean that any legitimate user who makes 10 typos while trying to login will not be banned? Even though I have Auto Block set to after 1 attempt?

You are right about trying it out and seeing what happens but I want to make sure I understand that Auto Block will not trigger a failed login attempt.

You are correct, a failed login should not trigger the auto ban the way you have it set up. That is why I couldn't think of an example of how it could go wrong. :-)

While I have you here, is there a limit to how many redirects I can do in the URL Redirection feature? Do you think it is better performance-wise to do the 301's in the htaccess file? Should I open a new ticket for this question? :-)

That one is a little outside my comfort zone. The best I could do with it would be to go find my Magic 8 Ball. If you start a new ticket, one of the other guys will pick it up. Thanks.