2. Features

v5.1

• WAF

v5.0

• Site heath checks

Premium

• Akismet support

• Event hooks

v4.4.0

• Add WP_FAIL2BAN_USE_AUTHPRIV.

• Add WP_FAIL2BAN_FREE_ONLY.

• Add WP_FAIL2BAN_PLUGIN_LOG_OTHER.

Premium

• Add support for Pingbacks while blocking XML‑RPC.

v4.3.2

• Back-port new Block event class.

Premium

• Add cron event to update trusted Cloudflare IP ranges weekly.

• Add cron event to update trusted Jetpack IP ranges weekly.

• Add cron event to update MaxMind database weekly.

• Add support for blocking by Country.

• Add XML‑RPC blocking; allow trusted IPs and Jetpack.

2.1. NEW - Multisite Support

Version 4.3 introduces proper support for multisite networks.

2.2. NEW - Block username logins

Sometimes it’s not possible to block user enumeration (for example, if your theme provides Author profiles). Version 4.3 adds support for requiring the use of email addresses for login.

2.3. NEW - Filter for Empty Username Login Attempts

Some bots will try to login without a username. Version 4.3 logs these attempts and provides an “extra” filter to match them.

2.4. NEW - syslog Dashboard Widget

Ever wondered what’s being logged? The new dashboard widget shows the last 5 messages; the Premium version keeps a full history to help you analyse and prevent attacks.

2.5. Support for 3rd-party Plugins

Version 4.2 introduced a simple API for authors to integrate their plugins with WPf2b, with 2 experimental add-ons:

• Contact Form 7

• Gravity Forms

2.6. CloudFlare and Proxy Servers

WPf2b can be configured to work with CloudFlare and other proxy servers. For a brief overview see WP_FAIL2BAN_PROXIES.

2.7. Comments

WPf2b can log both successful comments (see WP_FAIL2BAN_LOG_COMMENTS), and unsuccessful comments (see WP_FAIL2BAN_LOG_COMMENTS_EXTRA).

2.8. Pingbacks

WPf2b logs failed pingbacks, and can log all pingbacks. For a brief overview see WP_FAIL2BAN_LOG_PINGBACKS.

2.9. Spam

WPf2b can log comments marked as spam. See WP_FAIL2BAN_LOG_SPAM.

2.10. User Enumeration

WPf2b can block user enumeration. See WP_FAIL2BAN_BLOCK_USER_ENUMERATION.

2.11. Work-Arounds for Broken syslogd

WPf2b can be configured to work around most syslogd weirdness. For a brief overview see WP_FAIL2BAN_SYSLOG_SHORT_TAG and WP_FAIL2BAN_HTTP_HOST.

2.12. Blocking Users

WPf2b can be configured to short-cut the login process when the username matches a regex. For a brief overview see WP_FAIL2BAN_BLOCKED_USERS.

2.13. mu-plugins Support

WPf2b can easily be configured as a must-use plugin.