WordPress.org

Posted a reply to Some XML RPC request not generating logs, on the site WordPress Support Forums:
Sorry, just realised $_POST may be empty for XML-RPC. It's the contents of $HTTP_RAW_POST_DATA you…

1 month ago

Posted a reply to Some XML RPC request not generating logs, on the site WordPress Support Forums:
Yes, it could. However, are you sure $_POST was empty? It's just that making an…

1 month ago

Posted a reply to No Logging, on the site WordPress Support Forums:
Have you checked /var/log/syslog? If there's nothing in there, check where PHP is logging errors.…

1 month ago

Posted a reply to WP_FAIL2BAN_AUTH_LOG not working after upgrade to 3.5.3, on the site WordPress Support Forums:
I just tested it locally using LOG_LOCAL0 and the entries go where they should, so…

1 month ago

Posted a reply to Some XML RPC request not generating logs, on the site WordPress Support Forums:
If you're seeing: XML-RPC authentication failure for ... then the XML-RPC requests you're not seeing…

1 month ago

Posted a reply to Urgent: Plugin doesn't writes to syslog, on the site WordPress Support Forums:
Unfortunately you've not given me much to work with.... Which OS? What other plugins have…

1 month ago

Posted a reply to Some XML RPC request not generating logs, on the site WordPress Support Forums:
OK. Are other events being logged? e.g. failed login via the normal form? What other…

1 month ago

Posted a reply to anonymous WP-plugins, on the site WordPress Support Forums:
OK, wow - I think we've just defined "edge case" ;-) You should be able…

1 month ago

Posted a reply to anonymous WP-plugins, on the site WordPress Support Forums:
I see what you're doing, but I don't understand why you're doing it. Can you…

1 month ago

Posted a reply to Major security flaw., on the site WordPress Support Forums:
In order: Compare and contrast your report to this one. I read your post as…

1 month ago

Posted a reply to Couple of Bugs - 3.5.1, on the site WordPress Support Forums:
Thanks for the feedback. 1) Pingbacks have always logged to LOG_USER; it made sense to…

1 month ago

Posted a reply to Major security flaw., on the site WordPress Support Forums:
Thanks for the bug report - fixed in 3.5.3, available a few minutes ago. Just…

1 month ago

Posted a reply to Working with 2.3.1 and not vith 3.5.1, on the site WordPress Support Forums:
As mentioned in the upgrade notices, you'll need to update your fail2ban filters - they've…

2 months ago

Posted a reply to Feature suggestion: block SPAm comment IPs too, on the site WordPress Support Forums:
I've added this to version 3.5.

2 months ago

Posted a reply to Long subdomain names breaks detection, on the site WordPress Support Forums:
A had a play with various options, and for now I'm going with your idea;…

2 months ago

Posted a reply to Some XML RPC request not generating logs, on the site WordPress Support Forums:
Has version 3.5 helped?

2 months ago

Posted a reply to regex fixed in -hard.conf, but not in -soft.conf, on the site WordPress Support Forums:
Thanks - I've updated all the filters for 3.5.x.

2 months ago

Posted a reply to block xml-rpc brute force attacks?, on the site WordPress Support Forums:
Yes, it does, and it both logs and blocks multicall attacks.

2 months ago

Posted a reply to false positive on user enumeration, on the site WordPress Support Forums:
Yes, it is quite a big net, but with various other security plugins not playing…

2 months ago

Posted a reply to Not logging - Known issues with other plugins?, on the site WordPress Support Forums:
If you set Mask Login Errors in Login LockDown then you'll get no logging. However,…

2 months ago

Posted a reply to Testing WP_FAIL2BAN_BLOCK_USER_ENUMERATION, on the site WordPress Support Forums:
I can only think that it didn't work with 4.2.x; I know I tested it…

3 months ago

Posted a reply to WP fail2ban logs over the network, on the site WordPress Support Forums:
Just going through old threads - that was fixed in 3.0.

3 months ago

Posted a reply to Long subdomain names breaks detection, on the site WordPress Support Forums:
In the general sense no, it doesn't matter which blog is being attacked, but, for…

3 months ago

Posted a reply to Athentication attempt from XML-RPC not blocked, on the site WordPress Support Forums:
Good catch - I'll do another point release later today to fix that. Thanks!

3 months ago

Posted a reply to Feature suggestion: block SPAm comment IPs too, on the site WordPress Support Forums:
Yes, I like that idea - I'll look into it.

3 months ago

Posted a reply to Not logging wp-login failures 3.0.0, on the site WordPress Support Forums:
Your log clearly shows wpf2b is working as intended.

3 months ago

Posted a reply to wordpress-hard.conf failregex, on the site WordPress Support Forums:
Fixed in 3.0.1.

3 months ago

Posted a reply to error with new filters, on the site WordPress Support Forums:
Changed for 3.0.2.

3 months ago

Posted a reply to Severe problems with filters included with v3.0, on the site WordPress Support Forums:
The filters were fixed in 3.0.1. The double logging was due to a change in…

3 months ago

Posted a reply to Doesn't seem to block IPs, on the site WordPress Support Forums:
@FolioVision: If you've something to contribute to the plugin that you can't post here, email…

3 months ago

Posted a reply to NGINX Support?, on the site WordPress Support Forums:
See WP_FAIL2BAN_PROXIES in the readme.

3 months ago

Posted a reply to self banned using wordpress-hard, on the site WordPress Support Forums:
Good point - I'll add a reminder to the readme for the next release.

3 months ago

Posted a reply to Update Readme, on the site WordPress Support Forums:
Fixed with 3.0.1.

3 months ago

Posted a reply to Testing WP_FAIL2BAN_BLOCK_USER_ENUMERATION, on the site WordPress Support Forums:
I've re-tested this for 3.0.2 and it's working as expected. My guess is you've got…

3 months ago

Posted a reply to Long subdomain names breaks detection, on the site WordPress Support Forums:
"Just log to syslog", I thought - how hard can it be? Unfortunately just truncating…

3 months ago

Posted a reply to Not logging pingbacks, on the site WordPress Support Forums:
It's always worked for me, so I'm wondering if you've got another plugin installed that's…

6 months ago

Posted a reply to Doesn't seem to block IPs, on the site WordPress Support Forums:
Try setting WP_FAIL2BAN_SYSLOG_SHORT_TAG - you'll need to upgrade to version 3.0 of WPf2b first.

6 months ago

Posted a reply to Plugin seems to severely overstate the number of login attempts, on the site WordPress Support Forums:
I'm pretty sure this was caused by attacks on XML-RPC. WPf2b 3.0 has some new…

6 months ago

Posted a reply to ithemes security update stops fail2ban logging to auth.log, on the site WordPress Support Forums:
This is caused by iThemes adding its filter to the head of the chain and…

6 months ago

Posted a reply to Varnish configuration, on the site WordPress Support Forums:
The standard for this is to get Varnish to set X-Forwarded-For, and then tell WPf2b…

6 months ago