<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	
	>
<channel>
	<title>
	Comments on: A word on WordPress security	</title>
	<atom:link href="https://emacstragic.net/uncategorized/a-word-on-wordpress-security/feed/" rel="self" type="application/rss+xml" />
	<link>https://emacstragic.net/uncategorized/a-word-on-wordpress-security/</link>
	<description>Jason Lewis</description>
	<lastBuildDate>Thu, 13 Sep 2012 00:00:33 +0000</lastBuildDate>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9</generator>
	<item>
		<title>
		By: Jason Lewis		</title>
		<link>https://emacstragic.net/uncategorized/a-word-on-wordpress-security/#comment-39</link>

		<dc:creator><![CDATA[Jason Lewis]]></dc:creator>
		<pubDate>Thu, 13 Sep 2012 00:00:33 +0000</pubDate>
		<guid isPermaLink="false">http://emacstragic.net/?p=435#comment-39</guid>

					<description><![CDATA[I realised what I wrote was perhaps a bit misleading. fail2ban won&#039;t directly protect your WordPress blog from brute force attacks. It could in theory though I don&#039;t know of any pre-written plugins or tools to do that at this time.
What you could do get fail2ban to monitor failed login attempts to WordPress, and ban those IPs.
There is a nice little writeup at &lt;a href=&quot;http://blog.shadypixel.com/spam-log-plugin/&quot; title=&quot;Random Bits&quot; rel=&quot;nofollow ugc&quot;&gt;Random Bits&lt;/a&gt; blog about using fail2ban to block spammers. It would be easy to extend to include failed login attempts. I might have a stab at that at some point.]]></description>
			<content:encoded><![CDATA[<p>I realised what I wrote was perhaps a bit misleading. fail2ban won&#8217;t directly protect your WordPress blog from brute force attacks. It could in theory though I don&#8217;t know of any pre-written plugins or tools to do that at this time.<br />
What you could do get fail2ban to monitor failed login attempts to WordPress, and ban those IPs.<br />
There is a nice little writeup at <a href="http://blog.shadypixel.com/spam-log-plugin/" title="Random Bits" rel="nofollow ugc">Random Bits</a> blog about using fail2ban to block spammers. It would be easy to extend to include failed login attempts. I might have a stab at that at some point.</p>
]]></content:encoded>
		
			</item>
	</channel>
</rss>
