invisnet / wp-fail2ban-lts Goto Github PK

While using wordpress in a docker environnement, wpf2b seems not to log anything. Even if I configure the syslog driver for docker.
Docker as a specific way of handling logs from containers and should be supported, or at least a configuration guide should exists in the docs.
On ways to mitigate this bug could be to allow a fallback to writing logs intot a local file instead of using syslog.

I added both filters to fail2ban. And this is my jail.local:

[wordpress-hard]
enabled = true
filter = wordpress-hard
logpath = /var/log/auth.log
maxretry = 3
findtime = 3600
bantime = 3600
port = http,https

[wordpress-soft]
enabled = true
filter = wordpress-soft
logpath = /var/log/auth.log
maxretry = 3
findtime = 3600
bantime = 3600
port = http,https

I use a free proxy to test it out cause I added 'ignoreip' as well so I'm whitelisted. When I make some attempts, only wordpress-hard seems to register them. But not wordpress-soft.

I use:

sudo fail2ban-client status wordpress-hard
sudo fail2ban-client status wordpress-soft

To monitor them.

I use a popular plugin called Wordfence which includes a two factor authentication option for logins. I've been constantly having to reset fail2ban bans. After you type in a correct username and password the login page reloads so you can enter a 2FA token, but the login page reload counts as a login failure.

I was wondering if you could look into this?