Firewall blocked - I'm getting 403 errors, unable to connect or timeouts

If you find that you are unable to:

  • open your website - it just times out or takes too long to respond
  • connect to webmail or cPanel - it just times out or takes too long to respond
  • send or receive email (your email software says it can't connect to the server)

then it is most likely that the external/public IP address of your internet connection has been blocked for some reason.

First of all, don't panic! The rest of the world can still see your website, we are only blocking your connection.

How to remove your IP address from the firewall

You can get your IP address unblocked easily from within your Krystal Client Area.

From the client area dashboard menu, click on the Hosting link.

Simply click the CHECK FIREWALL button. If you are blocked you will see CHECKING, UNBLOCKING, UNBLOCKED in sequence. If you are not blocked you will simply see CHECKING followed by ALLOWED.

Alternatively, click the MANAGE button - the following screen will automatically check and unblock your IP address if it was blocked.

You can click re-check here to check again. You also have the option to check a different IP address - perhaps for a remote designer or developer who's been locked out. You can easily find out your external/public IP address by visiting View My IP.

About our IP address blocking policies

In order to protect our service from abuse, the following events will lead to your IP address being blocked. Usually this is only temporary (usually 20 minutes), but it may become permanent if you are temporarily blocked more than 3 times within a 24 hour period. Common reasons for your IP address becoming blocked include (in order of popularity):

  • Using an incorrect username/password combination into cPanel more than 5 times in a few minutes.
  • Using an incorrect email address/password more than 5 times in a few minutes into webmail. If you have misconfigured Outlook, Mail or other email software on your PC or Mobile device to automatically fetch email using the wrong email address/password combination, this will also cause your IP address to be blocked.
  • Using an incorrect username/password more than 5 times in a few minutes into a password protected web page.
  • Collecting POP3 email more than 90 times in an hour (from a specific IP address from a specific mailbox).
  • Accessing a page using URL parameters that have been blocked by Mod Security more than 5 times in a few minutes.

Web developers

If you have just added new scripts/modules/plugins to your website it is also possible that mod_security might be triggered. While this is rare, if you experience a series of 403 forbidden errors, and then find yourself unable to connect, then it is likely that mod_security has logged security events which have lead to your IP being blocked temporarily.

In this event, please contact us giving full details of the URL you were using, the time of the events and your public IP address (available from View My IP). We will then analyse the mod security logs and find out what rules were triggered, if any.


How did we do?


© Krystal Hosting Ltd 2003–2019