WordPress.org

Posted a reply to "WP_FAIL2BAN_PROXIES does not work with network range", on the site WordPress Support Forums:
Thanks for that - I've added it for 2.3.0. One of the perils of working…

4 months ago

Posted a reply to "xmlrpc logging to LOG_AUTH", on the site WordPress Support Forums:
Pingbacks aren't an authentication event so LOG_USER is a more suitable place than LOG_AUTH. If…

4 months ago

Posted a reply to "Fail2Ban - multiple values for WP_FAIL2BAN_BLOCKED_USERS", on the site WordPress Support Forums:
The right way is to modify the regex as in your example - PHP won't…

4 months ago

Posted a reply to "some kind of hits are not logged", on the site WordPress Support Forums:
That log entry says the server returned 301, so the request never got as far…

4 months ago

Posted a reply to "Error using WP_FAIL2BAN_BLOCKED_USERS", on the site WordPress Support Forums:
No, you're quite correct - it was a stupid mistake on my part. Should be…

7 months ago

Posted a reply to "HTTP_HOST", on the site WordPress Support Forums:
The Host header is defined in section 14.23 of RFC 2616 as: Host = "Host"…

7 months ago

Posted a reply to "Security Update Question", on the site WordPress Support Forums:
No, WPf2b uses the same regex as sshd - far simpler than the ones that…

7 months ago

Posted a reply to "need some hand-holding with the advanced features of this plugin", on the site WordPress Support Forums:
Not quite: define('WP_FAIL2BAN_PROXIES','199.27.128.0/21,173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/12'); The list of IP ranges has to be a single string. WP_FAIL2BAN_BLOCK_USER_ENUMERATION…

7 months ago

Posted a reply to "Feature request - block xmlrpc attacks", on the site WordPress Support Forums:
Good idea - this will be in version 2.2.0.

7 months ago

Posted a reply to "log file", on the site WordPress Support Forums:
If you want to change which syslog facility is used you can do that by…

7 months ago

Posted a reply to "can I run this plugin from mu-plugins?", on the site WordPress Support Forums:
Well, first the caveat: I've not tried it. However, since there's only one important file…

11 months ago

Posted a reply to "Good idea but...", on the site WordPress Support Forums:
Glad you've got it working, but the error (which I can't reproduce) implies something else…

11 months ago

Posted a reply to "Good idea but...", on the site WordPress Support Forums:
Which version of WP are you using?

11 months ago

Posted a reply to "WP_FAIL2BAN_LOG doesn't work", on the site WordPress Support Forums:
Damn - thought I'd caught all those; bad habit from PHP3 days. 2.1.1 should fix…

1 year ago

Posted a reply to "Support for X-Forwarded-For", on the site WordPress Support Forums:
Sorry for the delay in mentioning it, but the latest release now has support for…

1 year ago

Posted a reply to "Block enumerate users", on the site WordPress Support Forums:
Thanks for that - I've added something similar to 2.1.0, released last night.

1 year ago

Posted a reply to "Bug in wp-fail2ban.php", on the site WordPress Support Forums:
Thanks for that - it's fixed in 2.0.1. As for forcing a check on private…

2 years ago

Posted a reply to "Support for X-Forwarded-For", on the site WordPress Support Forums:
I've just released 2.0.0 which has some *experimental* code to handle this; it's a little…

2 years ago

Posted a reply to "Sick of botnets? This might help... (Not a support request.)", on the site WordPress Support Forums:
That was such a good idea I added some *experimental* code for it to 2.0.0…

2 years ago

Posted a reply to "Can't use WP-fail2ban in a corporate environment", on the site WordPress Support Forums:
I've just released 2.0.0 which has some *experimental* code to deal with this problem. Details…

2 years ago

Posted a reply to "Small change for debian 6.0 (and shorewall)", on the site WordPress Support Forums:
Thanks - I added that to the FAQ in the last version.

2 years ago

Posted a reply to "what about /xmlrpc.php", on the site WordPress Support Forums:
I've had a look at the XML-RPC code, and the problem is that wp_xmlrpc_server::login() doesn't…

2 years ago

Posted a reply to "Anonymous functions", on the site WordPress Support Forums:
May I ask why you're not using at least PHP 5.3? I know some hosting…

2 years ago

Posted a reply to "Nothing blocked, don't understand why.", on the site WordPress Support Forums:
See: http://www.fail2ban.org/wiki/index.php/Fail2ban:Community_Portal#Count_.22Last_message_repeated_N_times.22_correctly

2 years ago

Posted a reply to "[Suggestion] add optional SYSLOG of failed logins", on the site WordPress Support Forums:
Try WP fail2ban. I like my plugins simple and standalone (one task, one plugin) which…

2 years ago

Posted a reply to "restart of fail2ban service fails", on the site WordPress Support Forums:
Does the sshd filter work with your fail2ban install? The lines from your common.conf are…

2 years ago

Posted a reply to "restart of fail2ban service fails", on the site WordPress Support Forums:
I think the problem is that you need a capital A at the start of…

2 years ago

Posted a reply to "restart of fail2ban service fails", on the site WordPress Support Forums:
What does fail2ban-regex say? e.g. fail2ban-regex /var/log/messages filter.d/wordpress.conf in the fail2ban directory. That will tell…

2 years ago

Posted a reply to "Login logger who stores a log-file on the server?", on the site WordPress Support Forums:
They say better late than never.... Try "WP fail2ban" - should do exactly what you…

2 years ago

Posted a reply to "[Plugin: Sidebar Login] Registration link", on the site WordPress Support Forums:
@WiseCapra: Just ran into a similar issue today. As Vasyl Martyniuk said, the problem is…

3 years ago

Posted a reply to "[Plugin: Custom Metadata Manager] Nothing passed to display_callback", on the site WordPress Support Forums:
Thanks for that - it's still showing as 0.5.6 wordpress.org though?

3 years ago