Hi,
Thanks for the reply.
This happens for the first failed attempt to log in, even when there is no blocks active on the site and the failed attempts is set to more than one.
Users only get one chance to log in correctly.
The 403 error is a little unfriendly for legitimate mistakes made by users.
Perhaps a blocked message using the sites template to say to users that this is locked due to multiple failed attempts to log in, try again in N minutes.
