Skip to main content

Comments

6 comments

Date Votes
  • 24x7server
    Hi, The machine from where you access should also be connected to IPv6 network. Does it respond to IPv6 queries? Can you check and provide us with the output..
    0
  • Rodrigo Gomes
    Hi, The machine from where you access should also be connected to IPv6 network. Does it respond to IPv6 queries? Can you check and provide us with the output..

    Of course yes. Both the client and the server have IPv4 and IPv6 enabled and fully operational.
    0
  • cPanelLauren
    If the IPv6 query times out in the browser leading to a fallback over IPv4 it sounds more like a networking related issue though, rather than something specific to cPanel unless you have reason to believe that something within cPanel is causing the delay?
    0
  • Rodrigo Gomes
    If the IPv6 query times out in the browser leading to a fallback over IPv4 it sounds more like a networking related issue though, rather than something specific to cPanel unless you have reason to believe that something within cPanel is causing the delay?

    Hello @cPanelLauren, The delay in my clients' networks is something that must surely happen eventually. It's not something we can control. Taking this into account, I question the functioning of cPanel regarding the validation of cookies through IP. This login problem when IPv6 is enabled is very common on my server, I would say that happens with about 40% of the clients. It's not a cPanel problem, but rather this "jerry-rig" that makes IPv6 and IPv4 work at the same time. What would be interesting would be to cPanel adapt the use of this cookie security check taking into account the constant exchange between IPv6 and IPv4.
    0
  • cPanelLauren
    Hi @Rodrigo Gomes I believe I misunderstood originally the source of the issue thank you for explaining it in more detail.
    Taking this into account, I question the functioning of cPanel regarding the validation of cookies through IP.

    You can disable this or change the validation to loose through tweak settings. [QUOTE]Cookie IP validation Validate the IP addresses used in all cookie-based logins. This will limit the ability of attackers who capture cPanel session cookies to use them in an exploit of the cPanel or WebHost Manager interfaces. For this setting to have maximum effectiveness, proxydomains should also be disabled. Strict validation requires the current IP address and the cookie IP address to exactly match. Loose validation only requires they are in the same /24.
    Does modifying this help the issue at all? Thanks!
    0
  • Rodrigo Gomes
    Does modifying this help the issue at all?

    Hello @cPanelLauren, Yes, disabling this does indeed help. This is what I'm currently doing to get around this problem. But I like this security, I think it's important, I wish I could continue to use it even with IPv6 enabled. Thank you!
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post