Security/Ban Control - Revision history

SarahK at 19:46, 3 May 2022

2022-05-03T19:46:16Z

2022-01-26T19:29:26Z

2022-01-26T19:29:10Z

2022-01-26T19:28:50Z

2022-01-26T19:28:12Z

‎Auto Ban Control

2022-01-26T19:21:27Z

2022-01-26T19:21:06Z

2021-06-01T14:52:44Z

‎Managing Banned IPs

2021-06-01T14:52:18Z

‎Banning Email Domains

2020-08-04T13:50:52Z

@@ Line 1: / Line 1: @@
 WHMCS allows you to ban IP addresses and email domains. You can also configure automatic bans for users who exceed the maximum number of failed login attempts.
-* You can view and manage the list of banned IP addresses at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > [[Banned IPs]]'''.
+* You can view and manage the list of banned IP addresses at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > [[Banned IPs]]''' or, prior to WHMCS 8.0, '''Setup > Banned IPs'''.
-* You can alter the length of automatic IP address bans in the '''[[Security Tab|Security]]''' tab at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > General Settings'''.
+* You can alter the length of automatic IP address bans in the '''[[Security Tab|Security]]''' tab at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > General Settings''' or, prior to WHMCS 8.0, '''Setup > General Settings'''.
-* You can view and manage the list of banned email domains at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > [[Banned Emails]]'''.
+* You can view and manage the list of banned email domains at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > [[Banned Emails]]''' or, prior to WHMCS 8.0, '''Setup > Banned Emails'''.

@@ Line 2: / Line 2: @@
 * You can view and manage the list of banned IP addresses at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > [[Banned IPs]]'''.
-* You can alter the length of automatic IP address bans in the [[Security Tab|Security]] tab at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > General Settings'''.
+* You can alter the length of automatic IP address bans in the '''[[Security Tab|Security]]''' tab at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > General Settings'''.
 * You can view and manage the list of banned email domains at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > [[Banned Emails]]'''.

@@ Line 2: / Line 2: @@
 * You can view and manage the list of banned IP addresses at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > [[Banned IPs]]'''.
-* You can alter the length of the IP address ban in the [[Security Tab|Security]] tab at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > General Settings'''.
+* You can alter the length of automatic IP address bans in the [[Security Tab|Security]] tab at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > General Settings'''.
 * You can view and manage the list of banned email domains at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > [[Banned Emails]]'''.

← Older revision		Revision as of 19:28, 26 January 2022
Line 2:		Line 2:

	* You can view and manage the list of banned IP addresses at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > [[Banned IPs]]'''.		* You can view and manage the list of banned IP addresses at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > [[Banned IPs]]'''.
		+	* You can alter the length of the IP address ban in the [[Security Tab\|Security]] tab at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > General Settings'''.
	* You can view and manage the list of banned email domains at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > [[Banned Emails]]'''.		* You can view and manage the list of banned email domains at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > [[Banned Emails]]'''.
−
−	~~== Auto Ban Control ==~~
−
−	~~By default, WHMCS blocks any user IP addresses that attempt to log in to the Admin Area using an incorrect password three or more times. The length of this ban, by default, is 15 minutes.~~
−
−	~~You can alter the length of this ban in the [[Security Tab\|Security]] tab at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > General Settings'''.~~

@@ Line 6: / Line 6: @@
 == Auto Ban Control ==
-By default, WHMCS blocks any user IP addresses that attempt to log in to the admin area with a valid username and incorrect password three or more times. The length of this ban, by default, is 15 minutes. This helps to prevent hackers from endlessly trying different password combinations in order to gain access to your admin area.  You can alter the length of this ban by going to '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > General Settings > Security tab > Failed Admin Login Ban Time'''.
+By default, WHMCS blocks any user IP addresses that attempt to log in to the Admin Area using an incorrect password three or more times. The length of this ban, by default, is 15 minutes.
-To '''disable IP banning''' for failed admin logins, set this value to 0. The system will never attempt to ban IP addresses and the user will be able to continue to attempt to log in endlessly. For this reason, we recommend a minimum value of at least 1.
+You can alter the length of this ban in the [[Security Tab|Security]] tab at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > General Settings'''.

@@ Line 4: / Line 4: @@
 ===Managing Banned IPs===
-To view all the banned IP addresses in your system, go to '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > Other > Manage Banned IPs'''.  You will then see the banned IP addresses, the reason for that ban, and the date and time at which the ban expires.  You can delete IP addresses that have been banned in error from the ban list using the red delete icon to the right of the line.
+To view all the banned IP addresses in your system, go to '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > Banned IPs'''.  You will then see the banned IP addresses, the reason for that ban, and the date and time at which the ban expires.  You can delete IP addresses that have been banned in error from the ban list using the red delete icon to the right of the line.
 ===Adding a New Banned IP===

@@ Line 20: / Line 20: @@
 With WHMCS, you can ban email domains from signing up.  This is useful if you want to block customers from signing up using free email accounts.
-To enable this feature, go to '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > Other > Manage Banned Emails'''.  You will then see a list of all the currently banned email domains and the number of times a customer has attempted to sign up using them.
+To enable this feature, go to '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > Banned Emails'''.  You will then see a list of all the currently banned email domains and the number of times a customer has attempted to sign up using them.
 To add a new banned email domain, click the Add tab at the top of the page and then enter the email domain you wish to ban. For example, "hotmail.com".