User IP blocked

[adp-hck]

I'm having a problem with the IP of the User/Player connected to the server being blocked (on the same port) without any attacks.

my config

trigger_mode=MP
pps_threshold=50000
mbps_threshold=80
mitigation_pause=30
packet_count=20000
detection_threshold=2000

[firewall]
firewall_system=ipset

enable_fallback_blocking=True
block_other_attack_contributors=True

enable_pattern_detection=False
block_autodetected_patterns=True
contributor_threshold=30
max_pcap_files=3

[0vm]

Your issue is caused by these settings:

1. enable_fallback_blocking=True: This blocks IPs even without specific attack signatures, causing false positives.
2. block_other_attack_contributors=True: High-traffic users might get blocked unnecessarily.
3. block_autodetected_patterns=True: Detected patterns are blocked without manual review, leading to mistakes.

Change them to:

enable_fallback_blocking=False
block_other_attack_contributors=False
block_autodetected_patterns=False

Please refer to the config as there are detailed explanations of each of the settings before changing them.

[adp-hck]

Please refer to the config as there are detailed expla

okay I'll try, is there no v3 update?

[0vm]

Not at the moment, in the coming months there will be an update :)

[adp-hck]

Not at the moment, in the coming months there will be an update :)

sometimes a notification appears that there is a major attack, but in traffic there is no attack at all

[adp-hck]

Not at the moment, in the coming months there will be an update :)

I want to ask, does the limit in this config apply to incoming external IPs, or is it a limit on active ports?