Plugin Author
gioni
(@gioni)
Hi! Send me, please, a screenshot of the Main Settings tab.
Options JSON:
{“attempts”:10,”period”:60,”lockout”:60,”agperiod”:999,”aglocks”:3,”aglast”:48,”notify”:”1″,”above”:”5″,”subnet”:”1″,”nonusers”:”1″,”loginpath”:””,”cilimit”:200,”ciperiod”:5,”ciduration”:60,”cinotify”:”1″,”email”:””,”keeplog”:”90″,”usefile”:”1″,”stopenum”:1,”xmlrpc”:1,”ping”:0,”nofeeds”:0}
For Reference:
Attempts: 10 allowed retries in 60 minutes
Lockout duration: 60 minutes
Aggressive lockout: Increase lockout duration to 999 hours after 3 lockouts in the last 48 hours
Yes (checked): Notify admin if the number of active lockouts above 5
No (Unchecekd): My site is behind a reverse proxy
Block subnet: YES
Non-existent users: YES
Redirect dashboard requests: NO
Request wp-login.php: NO
Custom Login URL: <EMPTY>
Disable wp-login.php: NO
Citadel Threshold: Enable after 200 failed login attempts in last 5 minutes
Duration: 60 minutes
Notifications: YES
Notification Email Address: <EMPTY>
Keep records for: 90 days
Use file: YES
Hi Gioni,
I have just found this line in my logs hidden away in my /var/log/messages file. It seems to be killing PHP execution at a cruicial point.
Feb 26 09:22:10 php1 suhosin[18954]: ALERT – function within blacklist called: openlog() (attacker ‘xx.xx.xx.xx’, file ‘/xxxxxxx/public_html/wp-content/plugins/wp-cerber/wp-cerber.php’, line 391)
I wrongly assumed it was a problem with your plugin. Sorry for the false alarm.
Plugin Author
gioni
(@gioni)
Hi!
Good news. Don not check Use file if you are not using fail2ban.