dwinden
Forum Replies Created
-
No, only users that have the manage_options (manage_network_options in MultiSite) capability get access to the iTSec plugin admin interface.
The Author role by default does not have the required capability.
If the above info answers your question please mark this topic as ‘resolved’.
dwinden
Ok. I noticed the IP address 91.200.12.11 is not listed as banned in the .htaccess file. 7 other IP addresses are banned but not this one.
The 7 banned IP’s are:
- 185.93.187.49
- 109.196.50.156
- 159.224.139.133
- 66.249.78.117
- 90.154.141.99
- 217.128.213.47
- 86.62.117.180
Please make sure:
– The Banned Users module is enabled.
– Ban Lists setting is enabled
– Ban Hosts setting contains the IP addresses as listed above including 91.200.12.11.
– The content of the advanced Server Config Rules module matches the iTSec plugin entries in the .htaccess file.
– The Write to Files setting is enabled in the Global Settings module.dwinden
Please post the content of the .htaccess file located in the site root folder. Don’t forget to obscure any sensitive info it may contain.
dwinden
The iTSec plugin Away Mode feature does not protect against automated brute force attacks.
Away Mode only redirects wp-login.php GET requests to the site homepage.
If the above info answers your question please mark this topic as ‘resolved’.
dwinden
Thank you for sharing that info.
You may be interested in reading this topic.
So no need to rename the .htaccess file.
As you are just sharing some usefull info please mark this topic as ‘resolved’.
dwinden
Restore your site from a backup.
And next time open your own topic (unless you are getting the exact same message as the topic creator).
dwinden
Permanent IP bans are the result of temporary IP lockouts.
(default 3 for the same IP within 7 days).Temporary IP lockouts are registered in the Logs page. As well as the invalid login attempts that cause the temporary IP lockout(s).
So even though the permanent ban itself is not logged you should be able to see the activity that lead to the permanent IP ban.
If that info is missing in the logs then there might be something wrong.
Note IP’s can also be added manually to the Banned Hosts list.
Note log records older than 2 weeks are automatically purged from the log.
Note all logs records can also be purged manually.dwinden
I get the impression that the link to ip-lookup.net/domain-lookup.php in the Banned Users section is intended to be used to lookup the IP address belonging to a domain. Which is a bit different.
That said it does look like the same site could also be used to lookup v4 or v6 IP addresses.Perhaps an indication of the quality of iThemes support is that there is a very simple workaround to the issue as reported in this topic but iThemes is not providing it in their response.
Simply add a rewriterule to the .htaccess file which will redirect any traceip.net request to a substitute. Helps us out temporarily while it gives iThemes the time necessary to work out a solution.
Something iThemes is very good at though is making promises 😉
dwinden
Ok, one step at the time.
I think it is best to contact the hosting provider and mobilize them to look into this issue.
We know the iTSec plugin is able to write/update the .htaccess file on other envs. So it is unlikely that it is an iTSec plugin bug.
For some reason the iTSec plugin cannot write to the .htaccess file in this env.
So this must be related to something specific in this env (privileges?).dwinden
@creativewebcreations and @john
Not entirely sure but most likely this is caused by scheduled database backups. If possible activate the iTSec plugin and then in the Database Backups module disable the Schedule Database Backups setting.
If the memory error prevents you from doing anything in the Dashboard there is the possibility to disable the Schedule Database Backups setting manually in the database. In order to access the database a tool like phpMyAdmin or likewise is required.
dwinden
If you do not require any further assistance please mark this topic as ‘resolved’.
dwinden
If the wp-content/uploads/ithemes-security/itsec_away.confg file exists delete it.
The Away Mode feature redirects the login page to site homepage.
dwinden