Page 1 of 1

Auto-ban trigger

Posted: Fri Jun 16, 2017 11:47 pm
by JRS
I assume that entering an incorrect account/password combo X times will invoke the auto-ban feature. I'm seeing our ONE customer on this platform [i]occasionally[/i] suddenly being denied when connecting. Once the rejections occur, I have to restart the service to clear the problem.

The only thing the logs show is that immediately prior, the user -might- have exceeded the connection limit.

Does exceeding the connection limit count as an "infraction" towards the auto ban? For right now, as a troubleshooting step, I have increased the connection limit, and also turned off auto-ban. The one customer using our registered version is whitelisted, *.*.*.* is denied, and that is keeping uninvited folks out of the server, but every once in a while the legitimate customer is just flat rejected when trying to connect.

Looking for what might be causing this. Thanks. They're using SFTP to connect.

Posted: Thu Jun 22, 2017 5:22 am
by cp
It does, if they exceed the max conns per IP it ads an immediate temporary ban. The first ban should be short, less than one minute, and after that it would be cleared.

If the user is repeatedly trying to connect while banned and exceeding the connection limit, the ban will multiply exponentially.