Re: Nginx wp-admin access control

2020-04-22 Thread P.V.Anthony
On 22/4/20 4:43 pm, Lawrence wrote: Thanks everyone for the great support. After many replies I found that nginx did not like the cascading config that was suggested by some. Once I removed that, things seemed to stabilize  and all seems good. Please share the final working config. If you do

Re: Nginx wp-admin access control

2020-04-22 Thread Lawrence
: Re: Nginx wp-admin access control when you use fail2ban have a look on ipset it performe better on large lists. Am 16.04.20 um 17:13 schrieb Lawrence: > Greetings All, > > WOW, thanks for all the suggestions guys. Not many of them are > understood, I will try the fail2ban and s

Re: Nginx wp-admin access control

2020-04-16 Thread basti
: * basti *To: * *Sent: * 16/04/2020 4:54 PM *Subject: * Re: Nginx wp-admin access control I have not follow the entire discussion. What is the goal to do with wp-admin? There are several ways to limit access: - http basic auth - use a x509 cert to authenticate instead of user

Re: Nginx wp-admin access control

2020-04-16 Thread Lawrence
Greetings All, WOW, thanks for all the suggestions guys. Not many of them are understood, I will try the fail2ban and see how far I get. Thanks gaian. Lawrence From: basti To: Sent: 16/04/2020 4:54 PM Subject: Re: Nginx wp-admin access control I have not follow the

Re: Nginx wp-admin access control

2020-04-16 Thread basti
I have not follow the entire discussion. What is the goal to do with wp-admin? There are several ways to limit access: - http basic auth - use a x509 cert to authenticate instead of user/pass - write a hook plugin to wp_login() to use you own / external login - just use fail2ban to keep bad guys

Re: Nginx wp-admin access control

2020-04-16 Thread Francis Daly
On Wed, Apr 15, 2020 at 12:52:59PM +0200, Lawrence wrote: Hi there, > To start, I am very much a beginner to nginx and coding. I am a application > support engineer, but got very little development skills. I don't know WordPress; but on the nginx side, what matters is the request that is made

Re: Nginx wp-admin access control

2020-04-15 Thread P.V.Anthony
On 15/4/20 6:52 pm, Lawrence wrote: I have 5 seperate sites under sites-enabled. Each site has it's own config file where I have tried to manage and block access to my  two wordpress sites on wp-admin/wp-login. The site www.atlantic-kids-academy.com and www.hockeysticks4clubs.com are running

Re: Nginx wp-admin access control

2020-04-15 Thread Ian Hobson
Hi Lawrence, I installed WP fail2ban and Wordfence Security (free version). It doesn't stop them trying, but I run a "3 strikes and you are out for 60 minutes" regime. It means only 3-4 attempts an hour instead of thousands. I believe there is a plug in that moves the wp-admin location somew

Nginx wp-admin access control

2020-04-15 Thread Lawrence
Greetings All, To start, I am very much a beginner to nginx and coding. I am a application support engineer, but got very little development skills. I hope that there is someone out there that can guide me through this maze. I have searched the web and have seen multiple solutions but none see