deastwood

Hi Guys, dunno if you can help, normally support are so brilliant but they are kinda brushing me off on this one, maybe its because Im being stupid anyway heres the story,

im getting a long log with ppl attempting to get into the server, normally one ip, now I was told apf would block them after 5 attempts, but its sayign they have attempted 3000 times, so why were they allowed to try again, surpasses reply was:

We have already informed your that the IPs will be blocked in the server after many attempts into the server.You need not worry about the logs since even after being blocked by the server ,if the intruder tries to SSH into the server with the same IP the logs will show that IP again .You need not worry about it .These are just notifications for server administrators . Let us know if you have any other valid issues.

now i understand what he is saying, but they are still getting to try, this doesnt make sense, surely after 5 attempts that should be it, there should be no more logs from them, they should be blocked, can someone clear this up for me in a polite way?

Also the other question i had which was not answered is what are dropped packets im seeing alot of them in the logs,

thanks guys normally support are mint, they have put up with me for the last few weeks i suppose this is there way of shut up now lol :P

DewKnight

I believe what they're saying is that after 5 attempts they are blocked, but it still will log their attempts to get in, even if they're blocked.


Does that help clarify it at all?

__________________

David

That's what I gathered. That even though it's logging it, their tries aren't actually doing anything.

__________________

deastwood

yeh but the way the log file looks is like they are managing to still attempt with passwords and its just refusing them rather than not even letting them access the site, mebe im just being thick!

sorry to bother ya all with my pointless questions :P

cheers

Brandonnn

i believe that dewknight and david are right, after the 5th attempted request you are still going to recieve a log of any attempts. The door is permanently locked after the fifth attempt no matter what, but the way the server logs attempts stays the same.

__________________
poof

deastwood

cool guys thanks for the clarification .

any answer to what dropped packets are?

Brandonnn

packets that you sent out but didn't recieve back. they got lost, blocked, or corrupted somewhere.

__________________
poof

deastwood

is it a bad thing?

Skipdawg

In most cases no. Nothing you can really do about it though. It is just a effect of the internet. many factors can cause or affect it.

__________________