Block Password Guessing / Unblock user not working?

Hi UTMaddict,

Thank you for reaching out to the Community! 

The feature "Block Password Guessing" blocks the source IP address if there are multiple failed login attempts, it does not look for the username so clearing the authentication cache will not help. 

The source IP address that reached out to maximum allowed password attempts will be blocked for configured seconds. 

How many seconds did you configure to release the IP from the block list? 

You should be able to see if the user's IP is blocked by this feature in packetfilter logs on UTM. 

Thanks, 

You are completely right. I had a mistake in thinking

Another question coming up:

Is there a way to unblock such a blocked IP manually? 

Hi UTMaddict,

Thank you for the update! :) 

Apparently, there is no option to remove the blocked IP address from the backend; I have checked that in my LAB UTM. 

However, there is one workaround, I used to use it when the source IP address gets blocked by the password guessing feature. Please change the time to lover value and then put it back as before; this will reset the block timer. 

Note: Please remember to change the value back to default or original value.  

Thanks,

Hallo Sebastian,

Just curious, what if you briefly put a Host object in the 'Never Block' list, [Apply], remove it and [Apply] - is the user unblocked?

Or is this what you tried, Harsh?

Cheers - Bob