"You can't login from that IP address"

[SouperC (NotSoSuper)]

One thing to be aware of is, if you’re using a CDN (or at least with cloudflare) it’s possible that their edge server IPs are seen by your discourse install… vs the visitor’s IP.

So if you perform a “ban user and IP address” you can run into issues as you have effectively banned that edge server from your discourse install, along with any users that happen to be routed to it.

That said, I believe there is a way to fix this, but I can’t recall the process.

But nonetheless, something to look out for if you or your users report that they are being blocked from your site.

[physixfan]

Thanks for the insight. I think our forum have this CloudFlare CDN issue. Many users complain about being blocked but their IP address are not in the blocked list.

[digifan]

你好 Jeff，奇怪的是，我遇到同样的问题已经一天了。只有一个管理员帐户，我们无法登录任何帐户，包括用户帐户。我们没有启用任何 IP 地址范围阻止，除了禁用一个用户再次创建帐户。

尝试了多个具有不同 IP 地址的设备，仍然收到“您无法从该 IP 地址登录”的错误。

有人能帮忙吗？

[JammyDodger]

以上建议是否有帮助？

[digifan]

感谢您的回复。
我尝试从不同的移动设备以及使用不同的 IP 地址和位置登录。但都没有帮助。
我只能在能够登录的情况下进入管理员仪表板，而我目前无法登录。
看起来我完全被锁定了，无法登录。请建议是否有办法登录。

[JammyDodger]

这有点棘手，因为我不太确定你是怎么做到的。

但这适用于所有用户，而不仅仅是管理员？（以排除 use admin ip allowlist 设置）

你的论坛前面有 CDN 吗？如果你通过删除用户来禁用他们，然后点击“阻止 IP”按钮，这可能会导致意外的全面锁定。如果是这样，你可以尝试禁用它。

如果你有服务器访问权限（并且熟悉操作），你可以使用 rails 控制台查看 IP 阻止列表，并删除那个卡住你的条目：

Unable to log into my discourse - "You can't log in as xxx from that IP address."

Use ScreenedIpAddress.all to see what’s there and which ones you need to delete.

Unable to log into my discourse - "You can't log in as xxx from that IP address."

You’ll need to go into the rails console or postgresql command line and delete the ScreenedIpAddress record for your IP address. s = ScreenedIpAddress.match_for_ip_address("...") s.destroy

[digifan]

@JammyDodger 感谢您的回复。

该阻止影响了所有用户，是的，CDN 已经启用。

感谢所有的建议。

我所做的就是使用本地 hosts 文件方法指向 IP 并访问论坛。登录到仪表板并删除了被阻止的那个用户帐户的已屏蔽 IP，这就解决了问题。我想知道 Discourse 是如何考虑单个 IP 并持续阻止来自 CDN 的各种 IP 的所有用户的。

无论如何，现在问题已经解决了。非常感谢您和社区。

[JammyDodger]

很高兴您解决了这个问题。

恐怕 CDN 不是我的专长，但我认为这些主题有一些讨论可能与您相关 -

Moderator can't log in to our forums

In our Discourse website(Public Site) some of the moderators are unable to login. When we analyzed this issue, we were able to identify the error message which said: the ip address is blocked from being accessed. On further analysis, Discourse has out of box functionality, which runs background jobs that identifies banned ip addresses from the same subnet and if it reaches the threshold, it bans the entire subnet. The threshold is identified by admin setting : min_ban_entries_for_roll_up whi…

Discourse, Cloudflare and IP Bans

There’s a variety of Discourse/Cloudflare topics about but I can’t find any specific to my issue. We get spam account or users that need to be IP banned occasionally, but then this blocks other users given the IPs are being shared on account of the site running through Cloudflare. Is there a recommended way to either: Pass through the correct IP address for each user? Or to find the IP’s being banned and whitelist them?

[meglio (Anton)]

它确实会发送一次性登录链接，但启用 2FA 后，我仍然无法登录：