Bernhard Froehler
Bernhard Froehler
Great news that 3.0.0 is out, can't wait to try it! Is there any chance to get a pre-built 3.0.0, as with the "pre-built" branch previously, as mentioned in the...
In Joomla 4, in the backend, the menu structure for blocked IP, allow list, failed login etc. is shown two times:  The second level menu just duplicating the one...
As elaborated a bit in [this comment](https://github.com/codeling/bfstop/issues/68#issuecomment-33177773), one or more policies determining an adaptive number of allowed failed attempts might be useful against distributed brute force attacks.
When entering a subnet or IP address for blocking, bfstop should make sure that it the entered string fulfills the following criteria: * It is in a format that represents...
When entering a subnet or IP address for blocking, bfstop should make sure that it the entered string is in a format that represents a valid IP v4 or v6...
As an addition to https://github.com/codeling/bfstop/issues/76, one could also consider the "score" calculated there for determining additional measures to be taken during login; Acces to the login form with a high...
As an administrator, I want to see which usernames are being used most in the attacks. This should be presented in either a graph or a list, kind of a...
Currently, bfstop supports single IPv4 addresses, IPv4 CIDR subnet matches, and single IPv6 address matching. IPv6 CIDR subnet matching requires a more sophisticated check than IPv4 (see https://github.com/codeling/bfstop/issues/117#issuecomment-201072755).
After installation has completed, as a user I want more guidance on enabling and configuring the system. This might include (on the installation finished screen): * A button to enable...
Currently there are two different management interfaces for the bfstop package: - The plugin configuration in the "Plugins" section - The whitelist, blacklist and failed login display and manipulation and...