WP_FAIL2BAN_SYSLOG_TAG_HOST

Put hostname in syslog tag.

Default setting: true

Deprecated since version 6.0.0.

Added in version 5.3.0.


Useful if your distro uses journald.

By default WPf2b includes the virtual host in the syslog tag so that the target can easily be identified. Unfortunately, journald cannot match the “syslog identifier” with a regex, so the next best option is to omit the host and match “wordpress”.

Warning

For future compatibility, make sure you’re not using the short tag (“wp”).

/*
 * Use plain "wordpress" tag.
 */
define('WP_FAIL2BAN_SYSLOG_SHORT_TAG', false);
define('WP_FAIL2BAN_SYSLOG_TAG_HOST', false);

Then in your jail.conf you can do something like this:

[wordpress-hard]
enabled = true
filter = wordpress-hard.conf
journalmatch = SYSLOG_IDENTIFIER=wordpress
maxretry = 1
port = http, https