{"id":1950,"date":"2020-09-11T18:44:04","date_gmt":"2020-09-11T16:44:04","guid":{"rendered":"https:\/\/markus-blog.de\/?p=1950"},"modified":"2023-04-03T08:43:57","modified_gmt":"2023-04-03T06:43:57","slug":"optimizing-plesk-wordpress-jail-and-filter-for-fail2ban","status":"publish","type":"post","link":"https:\/\/markus-blog.de\/index.php\/2020\/09\/11\/optimizing-plesk-wordpress-jail-and-filter-for-fail2ban\/","title":{"rendered":"Optimizing plesk-wordpress jail and filter for fail2ban"},"content":{"rendered":"\n

The Plesk-Wordpress Jail is not configured optimal for banning all attacks to your wordpress Sites. So I have optimized the filter and jail.<\/p>\n\n\n\n

In Plesk Gui go to Tools & Settings and in Section Security to IP Address Banning (Fail2Ban):<\/p>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Then open Jails and Manage Filters:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

open the Jail Filter plesk-wordpress<\/em> and change the content to:<\/p>\n\n\n\n

[Definition]\nfailregex = ^<HOST>.* \"POST .*(wp-login.php|xmlrpc.php)([\/\\?#\\\\].*)? HTTP\/.*\" 200|401\nignoreregex =<\/code><\/pre>\n\n\n\n
like this and save settings with OK:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Now open the jail plesk-wordpress and change Settings:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
add the following into action<\/em>:<\/p>\n\n\n\n
iptables-multiport[name=\"plesk-wordpress\", port=\"http,https,7080,7081\"]<\/code><\/pre>\n\n\n\n
and this into the field for logpath<\/em>:<\/p>\n\n\n\n
\/*access*log\n\/var\/log\/apache2\/*access.log\n\/var\/www\/vhosts\/system\/*\/logs\/*access*log.processed<\/code><\/pre>\n\n\n\n
then click OK<\/em>.<\/p>\n\n\n\n
Now the WordPress-Jail is optimized to ban all attacks on wp-login and xmlrpc<\/a>.<\/p>\n\n\n\n
Unterst\u00fctzung<\/a><\/p><\/blockquote><\/figure>\n\n\n\n
——————————————————-<\/p>\n\n\n\n
Picture of Elchinator<\/a> on Pixabay<\/a><\/p>\n