search

mitchellkrogza / Fail2Ban.WebExploits

This custom Fail2Ban filter and jail will deal with all scans for common Wordpress, Joomla and other Web Exploits being scanned for by automated bots and those seeking to find exploitable web sites.
Other
169 stars 36 forks source link

WordPress backend navigation blocked. #11

Open Chathu07 opened 3 years ago

Chathu07 commented 3 years ago

While I'm navigating on WordPress backend I'm getting banned. Specially while updating the WordPress plugins through "Dashboard>Update". Anyway to correct it?

bigalownz commented 3 years ago

did you whitelist your IP address / addresses in fail2ban/jail.conf ?

jlguerrerosanz commented 1 year ago

hello, I am very happy with the list, but I have to edit it to suit my needs.

I have been thinking about this for a while. The thing is that I would love to set maxretries=0 for most of this filter conditions BUT i need some other like wp-login.php to give me more chances.

My IPs are dynamic so I can't set the ignoreIP directive efficiently.

Does it make sense to have 2 filters: webexploits.conf (maxretries=0) webexploits-that-could-ban-users.conf (maxretries=10)

and then in the jail.conf set the maxretries for both.

The only difference between both files would be the deletion of those lines that would lead to false positives. That way I could have the two levels of tolerance. The thing is that it maybe is too resource intensive.

Is there a smarter way?