RSFirewall! Rev 43 - Bulk ip black/white listing and automatic IP ban on login attemptsPosted by. Alex This article was posted in RSFirewall! Tagged with joomla security , rsfirewall
In Rev. 43 we have added some new features to the Blacklisting option. The features will make it easier for admins to allow and block IP addresses and also increase security by blocking attackers trying to access your /administrator.
Add multiple IP addresses to the Blacklist/Whitelist
First of all, you can now ban or allow multiple IP addresses in the Blacklist/Whitelist at once, making it easier to control who has access to your website. You just have to paste the IP addresses, one per line and RSFirewall! will save them all in one action.
Automatic blacklisting for failed administrator login attempts
Another interesting feature is the automatic blacklisting for failed administrator login attempts. Until now, if the attacker was trying to login to the administrator interface a captcha was showing. Now you can turn on the automatic blacklisting that will directly deny the access to the attacker.
Just go to Administrator / RSFirewall! / Firewall Configuration / RSFirewall! Active Scanner and turn on the "Enable automatic blacklisting" option. Then, turn on also the "Enable automatic blacklisting for /administrator login" and specify the number of failed attempts after which the IP should be added.
Other minor updates that we have made consist in adding the ability to disable the backend CAPTCHA, allowing template overrides for mod_rsfirewall and revert missing language translations to en-GB.