[GH-ISSUE #206] Has anyone setup fail2ban filter for vimbadmin? #161

New issue

Closed

opened 2026-02-26 09:36:24 +03:00 by kerem · 2 comments

kerem commented

2026-02-26 09:36:24 +03:00

Owner

Originally created by @ghost on GitHub (Sep 21, 2016).
Original GitHub issue: https://github.com/opensolutions/ViMbAdmin/issues/206

looking at opening up vimbadmin for customer password reset and wondering how to best protect it from abuse.

Originally created by @ghost on GitHub (Sep 21, 2016). Original GitHub issue: https://github.com/opensolutions/ViMbAdmin/issues/206 looking at opening up vimbadmin for customer password reset and wondering how to best protect it from abuse.

kerem closed this issue

2026-02-26 09:36:24 +03:00

kerem commented

2026-02-26 09:36:25 +03:00

Author

Owner

@barryo commented on GitHub (Sep 21, 2016):

You can set up fail2ban filters for the Apache log - e.g. on:

10.5.6.8 - - [21/Sep/2016:23:42:03 +0100] "POST
/vimbadmin/auth/lost-password HTTP/1.1" 302

Note that ViMbAdmin will send you to the password reset page whether you
entered a right email or not - note the message:

"If your username was correct, then an email with a key to allow you to
change your password below has been sent to you."

Barry

WCat wrote:

looking at opening up vimbadmin for customer password reset and
wondering how to best protect it from abuse.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/opensolutions/ViMbAdmin/issues/206, or mute the
thread
https://github.com/notifications/unsubscribe-auth/AAxHKTG8trIwAB_u2PE4byubEVEbwtroks5qsXEIgaJpZM4KDGhp.

@barryo commented on GitHub (Sep 21, 2016): You can set up fail2ban filters for the Apache log - e.g. on: 10.5.6.8 - - [21/Sep/2016:23:42:03 +0100] "POST /vimbadmin/auth/lost-password HTTP/1.1" 302 Note that ViMbAdmin will send you to the password reset page whether you entered a right email or not - note the message: "If your username was correct, then an email with a key to allow you to change your password below has been sent to you." - Barry WCat wrote: > looking at opening up vimbadmin for customer password reset and > wondering how to best protect it from abuse. > > — > You are receiving this because you are subscribed to this thread. > Reply to this email directly, view it on GitHub > https://github.com/opensolutions/ViMbAdmin/issues/206, or mute the > thread > https://github.com/notifications/unsubscribe-auth/AAxHKTG8trIwAB_u2PE4byubEVEbwtroks5qsXEIgaJpZM4KDGhp.

kerem commented

2026-02-26 09:36:25 +03:00

Author

Owner

@ghost commented on GitHub (Sep 21, 2016):

OK, thank you Barry. Great product that has served me well for a few years now.

@ghost commented on GitHub (Sep 21, 2016): OK, thank you Barry. Great product that has served me well for a few years now.