Re: [bitfolk] Networking? problem

** Gavin Westwood <bitfolk-lists-2015(a)gavinwestwood.uk> [2019-11-05 16:11]: ** end quote [Gavin Westwood] I set this up in 2014 by the looks of it. I can't remember where I got the reference info from, but I've got a file I ended up calling wp-xmlrpc.conf in the /etc/fail2ban/filter.d directory (Ubuntu 18.04). That may be unecessary detail. The content is: -- # Fail2Ban configuration file [INCLUDES] # Read common prefixes. If any customizations available -- read them from # common.local before = common.conf [Definition] _daemon = wp-xmlrpc # Option: failregex # Notes.: regex to match repeated xmlrpc attacks. The # host must be matched by a group named "host". The tag "" can # be used for standard IP/hostname matching and is only an alias for # (?:::f{4,6}:)?(?P[\w\-.^_]+) # Values: TEXT # failregex = \s.*\s.POST /xmlrpc.php HTTP/1.1"*.\s.* # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored. # Values: TEXT # ignoreregex = and /etc/fail2ban/jail.local [wp-xmlrpc] enabled = true filter = wp-xmlrpc action = iptables-multiport[name=wp-xmlrpc, port="80,443", protocol=tcp] sendmail-whois[name=wp-xmlrpc, dest=email(a)domain.net] logpath = /home/*/logs/access_log maxretry = 10 findtime = 60 bantime = 3600 -- I am no expecting somebody to point out an error :-) -- Paul Tansom | Aptanet Ltd. | https://www.aptanet.com/ | 023 9238 0001 ============================================================================= Registered in England | Company No: 4905028 | Registered Office: Ralls House, Parklands Business Park, Forrest Road, Denmead, Waterlooville, Hants, PO7 6XP