Line 185:
Line 185:
==== Fail2Ban ====
==== Fail2Ban ====
−
Fail2Ban is a contrib that blocks IP addresses involved in brute force logon attempts and such. See [[Fail2ban]]. In order to make Fail2Ban work with WordPress, the user "holck" posted the following code in thread https://forums.contribs.org/index.php/topic,53711.msg279902.html in the SME 9 Contribs forum. Holck notes that the standard jail for WordPress appears to work, but does not block the offending IP addresses. <blockquote>[wordpress-hard]</blockquote><blockquote>enabled = true</blockquote><blockquote>filter = wordpress-hard</blockquote><blockquote>logpath = /var/log/messages</blockquote><blockquote>maxretry = 3</blockquote><blockquote>action = smeserver-iptables[port="80,443",protocol=tcp,bantime=1800]</blockquote><blockquote>backend = polling</blockquote><blockquote></blockquote><blockquote>[wordpress-soft]</blockquote><blockquote>enabled = true</blockquote><blockquote>filter = wordpress-soft</blockquote><blockquote>logpath = /var/log/messages</blockquote><blockquote>action = smeserver-iptables[port="80,443",protocol=tcp,bantime=1800]</blockquote><blockquote>backend = polling </blockquote>
+
Fail2Ban is a contrib that blocks IP addresses involved in brute force logon attempts and such. See [[Fail2ban]]. In order to make Fail2Ban work with WordPress, the user "holck" posted the following code in thread https://forums.contribs.org/index.php/topic,53711.msg279902.html in the SME 9 Contribs forum. Holck notes that the standard jail for WordPress appears to work, but does not block the offending IP addresses.
+
+
<pre>[wordpress-hard]
+
enabled = true
+
filter = wordpress-hard
+
logpath = /var/log/messages
+
maxretry = 3
+
action = smeserver-iptables[port="80,443",protocol=tcp,bantime=1800]
+
backend = polling
+
+
[wordpress-soft]
+
enabled = true
+
filter = wordpress-soft
+
logpath = /var/log/messages
+
action = smeserver-iptables[port="80,443",protocol=tcp,bantime=1800]
+
backend = polling</pre>
===Backup of Wordpress===
===Backup of Wordpress===