Pennywize users - Need help with "Subnet Disable Threshold"
 

Im editing settings for a site, and Im not sure what to put in "Subnet Disable Threshold"

Should I put 1 or 10 or 20......

(since a subnet is not a complete ip address, Im not sure if I should put "1" in that field)

Can someone please explain how does this work...
:helpme

:helpme :(

We have 10 righ now but I will change it to 5. I am looking at the stats right now and 3 is enough for all legit members.

5 as a "disable treshold" should allow all legit members while stoping bruteforce attacks

why not 1?

Because you will block your legit members who are on dial-up. About 50% of our members have 2 diffrent subnets even though most of them are not on dial-up.

If you set it on 1 you will have to unblock legit members all day long...

Thanks Donnie

I keep ours set to 10 because something happens with members surfing on aol they usually need between 6 and 10. You need to them not to get locked out. I got this number from pennywizes customer support.

Yup, what he said. Set it at "1" and you'll have pissed off AOL members e-mailing you all day long. "10" seems to be the magic number. You'll still get an occasional legit AOL member blocked every now and then but you'll see that all "10" subnets are from AOL and you can just unblock them.

The best advice I can give you about Pennywize is to get rid of it today, and get Strongbox. Pennywize "protection" is a joke compaired to Strongbox. I used Pennywize for years, and was constantly fighting password traders, and real aol members getting cut off. Strongbox just works.... and well.

So technically 1 user can share his login with 9 more people and pennywise will do nothing?

set it at 7 and on your blocked redirect page, inform your aol users to email you from their AOL account and you'll fix it like so http://www.blackvaginafinder.com/blocked.html

I've had only two blocks in the past FOUR MONTHS since I changed the subnet threshhold from a low number....Before It was blocking at least one person and day and they emailed me pissed off. But because I was so ignorant, I thought that they were lying and that the software was right.

which is why you also set a DOWNLOAD limit.

I have heard about this too but we don't have any members surfing on AOL so I don't know anything about it. Most of our members are europeans...

Something between 5 and 10 is a good number, I guess...

what do you set your DOWNLOAD limit to? I've always wondered this one...

I go trough the stats once a day and I look for members with high subnet numbers. Most of our members only need 2 subnets. This way, it's really easy to find those members who are sharing passwords with friends and you can either block them manually or just contact them and warn them...

we had 3178 logins to one of our sites today and it took me only 5 minutes to find one (and only) cheater for today...

depends on how much content you have and how many plugins you have.
See how much your members dowload in average and add a couple of GB to that.

But I would not allow more then 10 GB a day

3178 logins?
So why did't pennywise block that accout, instead of you doing it manually???

I think he means seperate logins, and only one of them was a cheater... :thumbsup

:error

:upsidedow

You gotta look over the download stats over a week or so and pick the HIGHEST legit bandwidth user and set it a million bytes over that. You'll probably need to adjust as you add more content.