IProtect Settings

[shunga]

I have IProtect installed on my dedicated server with the following setup:

IProtThreshold 20
IProtAuthTimeout 300
IProtAccessTimeout 24
IProtDBFile /tmp/prot
IProtCompareN 3

I had a "stolen password" warning from it yesterday, the first I've ever had, but I've had problems with stolen passwords on a regular basis, and it hasn't stopped them before.

I discussed the IProtThreshold with my host before as it seems high - "set this to a reasonable number to allow for
users with dynamic IP addresses and AOL proxies" - but I think 20 might be too high, and that may be the reason for stolen passwords not being detected very often.

Does anyone have any opinion about the settings?

[The Badgurl]

Set it to 3 max...during a 24 hour period...that gives them one from home, one from work..and another just in case..

If they get kicked...tell em to email you with a reason why..

[ChrisR]

Don't know if this helps, but I have a site that gets only AOL traffic (It is NOT adult traffic). I do not get repeat traffic (trust me it is a long story) However, some proxies are used much more than others. IN the last 24 hours:

The average number of documents viewed per visitor is 2.666. There have been a total of 2719 internal hits from 1020 unique IP addresses.

However the top IPs was 24 and I have 12 that are more than 10. Hope that helps...

[shunga]

According to Wusage 7.0, on Saturday one particular member account had 141 visits, with 2,681 accesses. I assume 141 visits means 141 different IP numbers. Now if that's the case, why didn't IProtect block the account..? Does IProtect need to detect 20 IP's being used at the same time? http://bbs.adultwebmasterinfo.com/ubb/biggrin.gif

[The Badgurl]

Sounds like you need to read the instructions!

*lol*


Okay, just pulling your leg...no..it should have nailed that guy..if it's set up proper...depends on how long you have the period set for, and what action it is to take upon an alarm going off.

[toker]

If anyone is having problems with protecting their sites against traded or hacked logins contact me. I can show you where to find postings of your logins as well as run vonuribility tests on your members database. These things can cost you big $$$ in lost revenue and bandwith charges.

Im very affordable too http://bbs.adultwebmasterinfo.com/ubb/smile.gif