hi

as writed in the title, what are differences between the two plugins ipBlocker and failed_access_blocker ?

ipBlocker provides IP address filtering.

thanks sbillard

this IP filtering works only for admin page or for the whole site ?

From the plugin's Information button:

Quote:ipBlocker

Tools to block hacker access to your site.
Author: Stephen Billard (sbillard)
The plugin provides two services:

IP address filtering
Detection of password probing attempts
IP address filtering:

Allows/Denies access to the gallery to specified IP address ranges Detects repeated failed login attempts and blocks access to the IP address used in these attempts.

This does not block access to validated users, only anonomous visitors. But a user will have to log on via the admin pages if out of the IP ranges as he will get a Forbidden error on any front-end page including a logon form

Password probing:

Hackers often use probing or password guessing to attempt to breach your site This plugin can help to throttle these attacks. It works by monitoring failed logon attempts. If a defined threashold is exceeded by requests from a particular IP address, further access attempts from that IP accress will be ignored until a timeout has expired.

Options:

Logon threshold
Logon cool off
Action
IP list
Import list
IP list ranges cannot be managed with the plugin disabled

Of course, I read this informations before asking my question.

But, this is ambiguous

Quote:IP address filtering:
Allows/Denies access to the gallery to specified IP address ranges Detects repeated failed login attempts and blocks access to the IP address used in these attempts.
the plugin blocks access to the whole gallery, or only to login page ?

Since it refers to "gallery" which is generally a synonym for the site it blocks access to the site itself (I would say)

"Gallery" has always been used to describe the Zenphoto site front-end. Couple this with

Quote:This does not block access to validated users, only anonymous visitors. But a user will have to log on via the admin pages if out of the IP ranges as he will get a Forbidden error on any front-end page including a logon form
and it should not be ambiguous what is being blocked.