After a massive spam attack, hmmmnotsure blocked many IPs, but this caused issues for genuine users who couldn’t log in due to IP blocks. Falco suggested checking the /admin/logs/screened_ip_addresses page to resolve this issue and noted that blocked IPs are released after 1 year by default, which can be configured in settings. Falco also mentioned that dormant accounts are automatically removed after 2 years. pfaffman questioned if hmmmnotsure was using Cloudflare, which could be causing IP address mismatches. hhf.technology offered help with Cloudflare firewall settings. hmmmnotsure was able to release some IPs, improving the situation, and is now exploring Akismet for spam control. hhf.technology suggested using external checks, such as Akismet, as a primary defense, with Discourse’s inbuilt checks as a secondary level of defense.
I blocked many IPs after a massive spam attack. Now some people with genuine accounts aren’t able to login. It says “You can’t login with that IP”. How do I correct this?
Also, do blocked IPs get released after a few days? In my previous forum, I had configured it to 14 days.
And I have a few domains to the blocked list, that was responsible for many spammer profiles. So new registrations under these domains won’t be possible. But a quick domain search under Users returned many dormant profiles using that domain. Anyway I can mass-flush these profiles that belong to the blocked domain?
Are you using cloudflare and not the cloudflare template? Does your IP address match the one that Discourse sees for you or does it display the IP address of a cloudflare server?