cPanel keeps logging me out
cPanel keeps logging me out about every minute or so. I'm using Firefox from my home computer and my ISP is Xfinity. The web host is KnownHost on a shared web hosting plan.
The reason cPanel keeps logging me out is that Xfinity keeps switching between IPv6 and IPv4, then cPanel sees this as a Cookie Validation security issue and logs me out.
The fix is to force Firefox to only use IPv4 and to do that I needed to use the about:config and set this:
network.dns.disableIPv6
default is false set to true
Is there anything cPanel can do to fix this issue? I see this becoming a bigger issue as IPv6 becomes more prevalent.
-
Hey there! There isn't going to be anything we can do one our end for this. It's very odd to me that a provider would be dynamically switching between IPv4 and IPv6 on the fly, and I would expect similar behavior to happen with any secure site you're logged into.
0 -
Hi Rex,
From Gemini:
====
Most ISPs these days offer a method called "dual stack" which provides you with both an IPv4 and IPv6 address. This allows your devices to communicate using whichever protocol is supported by the destination.
...
So, even though you might have both addresses, you likely won't see a switch because they operate simultaneously.
====
Something is causing cPanel to see these two addresses and causes a log out. Can you please report this issue to the development department so it may be resolved.
Thank you.
0 -
I'll bring this up with the team on Monday and see what they say!
0 -
I spoke with the team and we are all in agreement that dual-stack networking is normal - however, what shouldn't be happening is the IP randomly changing between protocols during an active session. Much like any DHCP connection, you get your IP address and then you should have that same IP address throughout your session.
Since this is the case, there isn't going to be anything we can do on the cPanel side of things to help resolve this.
0 -
Hi Rex,
Sorry about the incorrect information regarding dual-stack networking.
Seams I can reproduce the issue every time. Simply logging into cPanel the CSS is not loading. You can see I'm logging in with IPv6, there is no issue when I disable IPv6 as IPv4 works fine.
I enabled the browser tools in Firefox (see attached images). Looks like the cPanel_magic_revision (cPanel cache) is the issue. Keep in mind this is a shared web hosting at KnownHost.
0 -
According to KnownHost:
====
The root cause of the issue is that your request are rapidly swapping between IPv4 and IPv6.
====
Yet looking at the browser tools I'm only seeing IPv6. Here is the complete reply from KnownHost.
0 -
I can't comment on their analysis so I can't say where they are seeing that, but you did originally mention that Xfinity is switching between the protocols, so it makes sense.
0 -
I asked KnownHost where they got the information, he told me:
====
That error is being output into cPanel's login_log.
====
0 -
Thanks for the clarification!
0 -
Hi Rex,
I hope you can run this new information by the development team. The login_log shows IP protocol changes, yet my browser tools indicate there are no protocol changes. Again make sure to let them know this issue only occurs when I allow IPv6 and have not disabled it. If I disable IPv6 I never get logged out. Also that this is on a shared hosting environment.
0 -
There isn't anything we can do on the cPanel side for this. When you disable the certain protocol that further confirms the issue.
0 -
Posting my solution.
I’m in the same boat and have found that using a VPN gets around it.
I would have thought turning off IPv6 at the router would work but didn’t.
0
Please sign in to leave a comment.
Comments
12 comments