• Resolved mike.s

    (@mikes-1)


    Hi,

    I just wanted to check aboiut the brute force protection.. if this is activated then the wordpress is still being accessed correct?

    so with each login attempt there is still a load on the server, so if i have your firewall installed on 100 wordpress sites on my server and all 100 get brute force attacked at the same time, with maybe many thousands of attempts per secons,its still going to bring the server to its knees isnt it?

    https://www.ads-software.com/plugins/wp-simple-firewall/

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Paul

    (@paultgoodchild)

    Hi,

    The plugin doesn’t protect against “brute force hacking” and load on your server. It’s not possible since with this is a WordPress plugin.

    To really solve the problem between brute force hacking and server load you need to configure your server and have protection built-in at the network/apache layers.

    What this plugin will do is cut-short those brute force attempts by not processing them when detecting that it’s happening or there are attempts to circumvent the site’s normal authentication process.

    It certainly wont stop your server falling over due to massive brute force hacking.

    I hope that helps.
    Paul.

    Thread Starter mike.s

    (@mikes-1)

    ok thnaks… i thought it might have similar protection to something like https://www.ads-software.com/plugins/ninjafirewall/

    Plugin Author Paul

    (@paultgoodchild)

    This is quite different since it is not actually a plugin (though it does have a plugin “version”).

    This is something we’re considering releasing, but it wont be there for a long time.

    This effectively boots into WordPress after it’s done the initial request processing and so it’s not strictly speaking a WordPress plugin.

    Cheers,
    Paul.

    Plugin Author Paul

    (@paultgoodchild)

    And I meant to also say, Ninja Firewall will also not be capable of preventing your site from falling to its knees with a sustained attack.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘brute force protection and load on server’ is closed to new replies.