Hello @emmah1 ,
Temporary lockout is lifted when the same IP request access to site again. So if the IP doesn’t come back to the site, it will be still in the Active Lockouts.
kind regards,
Kasia
Thread Starter
emmah1
(@emmah1)
Thanks, Kasia. Sorry if I’m misunderstanding, but doesn’t that then mean that the ‘Duration’ (in my case I set it to 300 seconds) doesn’t actually mean anything?
Hi @emmah1
No, it does actually set for how long lockout is valid. Let me explain that by example as this will better show how it works:
– let’s say that IP is 1.2.3.4
– this IP goes to the site and gets locked for 300 seconds
– it shows on a list
– the same IP visits site in 60 seconds after lockout
– it doesn’t get unlocked and stays on a list
– then the same IP visits the site again in 250 seconds since lockout happened
– it doesn’t get unlock and stays on a list
and then two different scenarios:
1)
– the same IP visits the site again after 320 seconds since lockout happened
– it gets unlocked (unless, of course, lockout happens again due to this IP hitting some rules)
2)
– the same IP does not visit the site for another 10 days since lockout happened
– it still is listed as locked until it visits the site again but then it’s detected than more than 300 seconds has passed by since lockout and… it gets unlocked.
In other words: lockout is lifted when a given IP visits the site again. If it doesn’t visit the site again then it doesn’t really matter if it’s locked or not. If it visits the site then upon each visit it’s checked if the set time has passed already (regardless whether it’s by 1 second or 1 year) and if so such lockout can or cannot be lifted.
Best regards,
Adam
Thread Starter
emmah1
(@emmah1)
Many thanks for explaining, Adam.
If it doesn’t visit the site again then it doesn’t really matter if it’s locked or not.
I guess it’s this part that confused me, as I would assume if it’s on the list it’s still locked out. I think what you’re saying is that it’s easier for the plugin to check the elapsed time when/if an IP visits again than to unlock the IP after (e.g.) 300 seconds. 🙂
Hello @emmah1,
You are welcome. Also, yes for the thing you said with the plugin to understand things. That way it is easier for the plugin to check and keep a track of it.
I’m glad we could help you with it here. Should you have any doubts or need any help, feel free to reply in the thread below or open a new thread and we would be happy to help.
Thank you,
Prathamesh Palve
