regex fixed in -hard.conf, but not in -soft.conf

  • Resolved coderonline

    (@coderonline)


    7 years, 8 months ago

    The fail regex om wordpress-soft.conf should be:

    failregex = ^%(__prefix_line)sAuthentication failure for .* from <HOST>( via XML-RPC)?$
            ^%(__prefix_line)sXML-RPC authentication failure from <HOST>$

    The last part ( via XML-RPC)? is missing in the plugins sample configuration and no attackers get blocked. Watch out, have fun.

    https://wordpress.org/plugins/wp-fail2ban/

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘regex fixed in -hard.conf, but not in -soft.conf’ is closed to new replies.