cPHULK Should Have a Timestamp Column When an IP is Added to the Blacklist or Whitelist
Whenever adding and or removing an IP from cPHULK's whitelist or blacklist it would be beneficial to have a time stamp both in GUI and in the database file.
Currently, there is a comment box next to each IP but this isn't sufficient as if someone was to suspiciously add an IP to a whitelist and or blacklist there is no way to determine how it was added. If the IP was added using the UI then this will be logged in the access logs, if the IP(s) are added via command line this will not get logged anywhere. There should always be logging whenever an IP is added to ensure that this was done legitimately.
Adding this feature would make cPHULK a lot more secure and give customers piece of mind.
I like this idea 
cPanel, WebHost Manager and WHM are registered trademarks of cPanel, L.L.C. for providing its computer software that facilitates the management and configuration of Internet web servers.
We added the IANA netblock name in the comment field 11.52 in the brute force emails so its easier to track what is being blocked. Adding the time makes sense, however I think showing which ip address added the blacklist entry would be a source of confusion.
We added the IANA netblock name in the comment field 11.52 in the brute force emails so its easier to track what is being blocked. Adding the time makes sense, however I think showing which ip address added the blacklist entry would be a source of confusion.
It might also be beneficial to log what IP the request came from.
It might also be beneficial to log what IP the request came from.
We added the IANA netblock name in the comment field 11.52 in the brute force emails so its easier to track what is being blocked. Adding the time makes sense, however I think showing which ip address added the blacklist entry would be a source of confusion.
We added the IANA netblock name in the comment field 11.52 in the brute force emails so its easier to track what is being blocked. Adding the time makes sense, however I think showing which ip address added the blacklist entry would be a source of confusion.
Replies have been locked on this page!