WP Cerber and Google Authenticator

Add the following line to the wp-config.php file. This should help.

define('CERBER_OLD_LP',10);

Thx, that works.

Tried also using your built-in 2FA. Cause then we thought we could use Cerber’s whitelisting to circumvent the 2FA for regular users.

But it didn’t work, I think because of the IP-address not recognized correctly, although we have the right settings in Cloudflare and WP Cerber.

Any ideas on that?

Is the fact that Cerber defaults to Legacy mode of any influence here (and why is that?).

Sorry for the many questions, just want to understand and make it easier for our writers.

• This reply was modified 5 years, 8 months ago by ogessel.
• This reply was modified 5 years, 8 months ago by ogessel.

See “Make sure that Cerber detects IP addresses correctly” here: https://wpcerber.com/getting-started/

There is no reason to use “Legacy mode”, set it to “Standard mode”.

Hi Gioni,

Thx, changed to Standard Mode.

But the IP problem isn’t solved, I already read that document and we already implemented that settings in WP Cerber and CloudFlare long ago.

See:

https://prntscr.com/o9y9aa
https://prntscr.com/o9y9ez
https://prntscr.com/o9y9j7
https://prntscr.com/o9y9wi

So all settings seem correct but the IP we see in Cerber is not the IP we see on Whatsmyip.

Greetings,
Olaf

• This reply was modified 5 years, 8 months ago by ogessel.

Please follow this guide but use your IPv6 address from the screenshot instead of IPv4 from the what is my IP address page: https://wpcerber.com/wordpress-ip-address-detection/

Hi Gioni,

Thanks for your troubles but we are not there yet I’m afraid.

The IPv6 address that I’m seeing now is different from the one in the screenshot. It seems dynamic in contrast to the IPv4 address.

Could I use wildcards and if so how?

These are the IPv6 addresses I have seen in the past:

https://prntscr.com/oh65zm

So what to enter in config then?

And what to do with other Authors and their IP’s? Can I enter a list or something?

Greets,
Olaf

PS: strange is though that I used to use the correct IPv4 in Cerber but that was a long time ago. But we have been using the same hosting and CloudFlare since years so that hasn’t changed.

Hi Gioni,

Did you get my last e-mail?

I’d really like to use the 2FA with Cerber but it won’t let me at the moment.

I tried to follow the Guide https://wpcerber.com/wordpress-ip-address-detection/ but ran into difficulties:

Step 2/3: in WP 5.2.2. this is no longer visible, do yo know where to find the key now?

https://prntscr.com/oswb7c

Greets,
Olaf

You went in the wrong direction. You have to open the Tools menu which is under the WP Cerber admin menu: https://wpcerber.com/wordpress-ip-address-detection/

Note: IPv6 wildcards are not supported yet.

Hi! How is it going?