An IP Address got put on the Banned IPs list by accident. It has since been deleted from that list. It's been over an hour and they still cannot access our website and receive a 403 Forbidden response when they try. I don't quite know how this system is meant to work, but I recall reading in the merchant guide that it can take some time (like an hour maybe?) for IPs that are added to the list to actually be restricted, but it didn't say anything about when they are removed from the list. I don't even know where the list is handled by the code... I'm assuming it must be in the CommerceBuilder.Licensing.dll because I looked through the code in the CommerceBuilder project but did not see any code that is responsible for actually blocking the addresses in the BlockedIPs table. Please explain how this system works and how I can get an accidentally banned IP unbanned ASAP.

Thanks Katie, I found it in the merchant guide again and yeah it's because of caching (though it says it should only take about 30 minutes but we were well over that and they were still being treated as banned). I'm still not sure where the code that actually handles the response to those banned IPs is located, but I assume it must be in the AbleCommerceHttpModule in the CommerceBuilder.Licensing library since I couldn't find it in the regular CommerceBuilder library or elsewhere in the AbleCommerce web application code. Anyway, thank you for the fast response.