Prev   Next

Back to the top of the FAQ

Q. Limit logins? Details, restrictions?

A. This FAQ item is deprecated. See see the next FAQ item instead.

Limit logins is only available in WebQuota.

Due to the connectionless architecture of the http protocol, certain conventions are commonly used to identify a 'user' and a 'login session'. With http, every request for a page or a picture is separate and distinct. The common convention to define a 'user' is a sequence of requests from the same IP address. This is further refined as being a request from the same IP address in combination with the username. There is no way for any web server software to differentiate between a single IP address with the same username and password, which can happen if the two users are on the other side of a proxy (their side).
An exception is with the HTTP 1.1 protocol, which allows multiple requests using the same TCP/IP connection. However not all browsers support this. Additionally, proxy servers usually disable HTTP 1.1 and dumb it down to HTPP 1.0.

In HTTP a 'login session' is typically defined as a series of requests from a single IP address with no break in requests for 10 minutes. This is the convention the software uses also (adding the username into the mix).

Since some ISP's such as AOL can change the requesting IP address on the fly, and/or some users will drop their POT connection and dial back in, it may be a good idea to have the minimum limit login level to be higher than 1. This way obvious abuse will be detected and prevented, while legitimate users will not be locked out. In version 4.0d and above, the Options dialog has a checkbox to consider only the first 3 octects for limit-logins (ie 201.202.203.*) rather than all 4 (201.202.203.204) - this handles the AOL proxy-client implementation where a single user can have as many as 20 different IP addresses - but all from the same Class C address.

Here is a link to list of AOL's ip addresses.

You can manually add this list (if the Windows GUI is too clumsy for you) to the registry as detailed here

Since version 5.0 of WebQuota this mechanism has been refined to allow a set of Class C addresses to be specified. This is in response to AOL using multiple class C address in its client proxy polling.

You may be interested in WebQuota CMCL Edition , which has more advanced features and a different pricing model.

Also, see the next FAQ item.

Back to the top of the FAQ

Prev   Next