Symptoms
-
VIP SAFE Threshold Levels and Description
Procedure
NOTE: The system only tracks bad/invalid requests, such as MAC addresses that do not exist in the database. Good/valid requests are not subject to throttling.
By default, reaching 10 will trigger a temporary block. The count decreases automatically every minute. If it reaches 50, a permanent block is applied.
You can, however, change those values.
Parameters are listed in this article.
Add the following parameters as desired:
| Parameter | Value | Description |
|---|---|---|
SAFE_whitelist |
comma-separated list of IPs and/or subnets in format IP/MASK | IP addresses that will not be part of this logic, set * to disable filtering |
SAFE_error_empty |
yes/no | When enabled will return an empty 200OK instead of a 403 |
SAFE_error_500 |
yes/no | When enabled will return a 503 instead of a 403 |
SAFE_MaxFraudScore |
whole number (Default is 10) | Maximum fail attempts before a temporary IP block is in place (Added in 1225) |
- If you would like to list the IP addresses that are currently filtered and their related fraud scores, follow these steps:
- In Endpoints Admin UI, go to the Diagnostics
- Go to the Fraud Score by IP page
- If you would like to remove an IP address from the temporary list, follow these steps:
- Log in to the Endpoints Module Admin UI
- Go to the Diagnostics > Fraud Score by IP page
- Click Allow next to the entry to remove.
- The system will automatically create a permanent block for IPs that reach the
SAFE_MaxFraudScorevalue. This value will decrease by 10% every minute.
Escalation Information
Escalation Information: SD1
If you need additional assistance, contact Crexendo Support at 855-211-2255 or email us at support@crexendo.com
Change Log
| Date | Description |
|---|---|
| Jun 1, 2026 | Article migrated and revamped |