Fluent AUTH
There is no option to manually block an IP on Fluent Auth? Shahjahan Jewel
You should use Cloudflare for something like that, or whatever firewall your current service offers. Block them before they get to your server. Having a server fight off attackers is just more CPU cycles for something that isn't its purpose.
William Beem Thanks, William - absolutely agreed!
That’s indeed how we usually handle it.
I was just curious because Fluent Auth already auto-blocks IPs after several failed attempts - and it even shows you the offending IP along with a report note if it’s been flagged before.
That's pretty handy.
So since the automated mechanism is there, I wondered if a manual block option might also exist.
Eg.: we can see some IPs not exceeding the limit, but that could be malicious. So manual block could be handy here.
But yes - Cloudflare is definitely the smarter layer to handle it.
Jorge de los Reyes I think of this feature as a secondary security level. There are plenty of reasons why some IP may get through your firewall and still have a malicious intent. Once identified, I think the manual block for a permanent solution makes more sense at the edge before the server.
The temporary block is cautionary. A manual block isn't. That's not to say that the attacker can't find another IP and try again. I tend to block more ASIN numbers than individual IPs.
William Beem Absolutely, William - that’s a smart move.
I’ll cross-check recent activity with that in mind!
I was just used to how wordfence allows you to do this manually, and, forget that it makes more sense continue improving our WAF rules! 💪
Thank you!