Giters

mitchellkrogza / Fail2Ban.WebExploits

This custom Fail2Ban filter and jail will deal with all scans for common Wordpress, Joomla and other Web Exploits being scanned for by automated bots and those seeking to find exploitable web sites.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

WordPress backend navigation blocked.

Chathu07 opened this issue · comments

commented

While I'm navigating on WordPress backend I'm getting banned. Specially while updating the WordPress plugins through "Dashboard>Update". Anyway to correct it?

commented

did you whitelist your IP address / addresses in fail2ban/jail.conf ?

commented

hello, I am very happy with the list, but I have to edit it to suit my needs.

I have been thinking about this for a while. The thing is that I would love to set maxretries=0 for most of this filter conditions BUT i need some other like wp-login.php to give me more chances.

My IPs are dynamic so I can't set the ignoreIP directive efficiently.

Does it make sense to have 2 filters:
webexploits.conf (maxretries=0)
webexploits-that-could-ban-users.conf (maxretries=10)

and then in the jail.conf set the maxretries for both.

The only difference between both files would be the deletion of those lines that would lead to false positives. That way I could have the two levels of tolerance. The thing is that it maybe is too resource intensive.

Is there a smarter way?