Brute force issue

[RandyL]

how do

1. ID 3 states a user from our GW being banded . this however causes a issue . how do or should I setup brute force to configured so it is seeing outside address and not reporting all addresses from outside the Lan as the GW address . which then causes everyone from outside to be banded …
   should I disable brute force and just install Fail2ban ?

| 3 | login | 1487454847 | 172.16.199.1 | 172.16.199.1/32 | {“user”:“stephen”} |
| 4 | login | 1487454860 | 172.16.199.3 | 172.16.199.3/32 | {“user”:“srsnetworks\stephen”} |
| 5 | login | 1487454871 | 172.16.199.3 | 172.16.199.3/32 | {“user”:“srsnetworks\randy”}

[X4LD1M0]

Hi @RandyL I assume you are behind a proxy which causes the public IP’s to be translated to an internal IP address. I had the same problem. Use the steps in the message below which should resolve that issue.

Slow WebDAV performance

Can you confirm if it takes approx 30 seconds before a response? If so then most likely the brute force mechanism got triggered and is slowing down the responses. You can disable it in the config.php file by adding: 'auth.bruteforce.protection.enabled' => false, But it would be better to improve the configuration. If you are behind a proxy, you will most likely translate all public IP’s to an internal IP, so it will look like only one IP is communicating, causing the brute force mechanism to …

[RandyL]

StephanW thanks for the info .

question . apache24 using the setting you gave
ProxyVia On
ProxyPreserveHost On
RequestHeader set X-Forwarded-Proto ‘https’ env=HTTPS

I tried putting it at the end and beginning give me a error

Performing sanity check on apache24 configuration:
WARNING: number of probes fixed does not match the number of defined probes (12 != 13, respectively)
WARNING: some probes might not fire or your program might crash
AH00526: Syntax error on line 2 of /usr/local/etc/apache24/Includes/cloud.mydomain.net.conf:
Invalid command ‘ProxyVia’, perhaps misspelled or defined by a module not included in the server configuration

httpd log file which doesn’t seem to show the errors above.
[Wed Apr 12 01:29:30.458035 2017] [ssl:warn] [pid 18796] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache]
[Wed Apr 12 01:29:30.549551 2017] [mpm_prefork:notice] [pid 18796] AH00163: Apache/2.4.25 (FreeBSD) OpenSSL/1.0.1s-freebsd PHP/7.0.15 configured – r$
[Wed Apr 12 01:29:30.549692 2017] [core:notice] [pid 18796] AH00094: Command line: ‘/usr/local/sbin/httpd -D NOHTTPACCEPT’

[X4LD1M0]

Most likely the proxy module isn’t enabled.

Check which modules are enabled with:

a2query -m | grep proxy

and check if you can find:

proxy_http (enabled by site administrator)

If not then run the command:

a2enmod proxy_http

to enable it. Then retry.