cPHulk Brute Force Protection - What are the Blacklist Options?

LordLiverpool

• January 06, 2017 04:16

Hello cPanel When someone tries a Brute Force Attack on my server I get an email to say they've been temporarily blocked, in accordance with my cPHulk settings. I'm given the 4 choices of permanently adding the IP address to a Whitelist/Blacklist? (Blacklist of course!!!)

]
• Block just the offending IP address e.g. 255.255.255.1
• Block the offending IP address and the adjacent ones in its immediate range e.g. 255.255.255.0 to 255.255.255.255
• Block with a /24 on the end, this seems to do the same as Option 2.
• Block with a /16 on the end, this seems to do the same as Option 2.

Can someone please clarify exactly what the /24 and /16 options do? Surely they do something different?!? I've tried Googling for an answer but haven't found anything clear. (See Image Attached) Thanks in advance. 44327

• 

  cPanelMichael

  • January 09, 2017 14:46

  Can someone please clarify exactly what the /24 and /16 options do? Surely they do something different?!?

  
  Hello, This is in-reference to the IP address subnet .The following third-party URLS help to explain how this works: IPv4 subnetting reference - Wikipedia Classless Inter-Domain Routing - Wikipedia Let us know if you have any additional questions. Thanks!

  0
• 

  LordLiverpool

  • January 27, 2017 09:37

  @cPanelMichael Thanks for replying. I've read those links, thanks very much. So this is my fresh understanding, please confirm if I'm correct or not. 44851 Each option would appear to progressively block larger numbers of IP addresses from 1 up to 65536 addresses. If I"ve understood CIDR correctly; then what is the difference between Option 2 (IANA Netblock) and Option 3 (/24) ? I ask myself; surely I must be wrong because why would cPanel offer two options that did the same thing? Am I missing something? If I've misunderstood please set me straight, I"d really appreciate it. Best Regards

  0
• 

  cPanelMichael

  • January 27, 2017 22:20

  Hello, It's possible the IANA Netblock will match the /16 class in some cases, however it doesn't always match because IANA Netblocks will differ depending on the specific network. Thus, we provide the IANA Netblock value as a convenience for administrators, even if it sometimes matches one of the other options. Thank you.

  0
• 

  LordLiverpool

  • January 31, 2017 08:14

  @cPanelMichael. Thanks for the clarification, it's appreciated. Best Regards.

  0

Please sign in to leave a comment.