adam/znc
1
0 Fork 0
mirror of https://github.com/znc/znc.git synced 2026-11-03 02:42:21 +01:00
Code Issues 362 Packages Projects Releases Wiki Activity

Disallow non-admin users to configure/use globally loaded fail2ban module #704

New Issue
Closed
opened 2026-10-05 04:39:40 +02:00 by adam · 0 comments
adam commented 2026-10-05 04:39:40 +02:00
Owner
Copy link
Copy source

Hi,

Non-admin users should not be allowed to configure or use the globally loaded fail2ban module. Currently a non-admin user can change the parameters, and can also use the commands to ban/unban hosts.

 znc@znc.in (EFNet)                                                                                                                                                                                                                      
22:09:31 -!- Irssi: Starting query in EFNet with ef*fail2ban
22:09:32 <jockek> help
22:09:32 <ef*fail2ban> ------
22:09:32 <ef*fail2ban> Command: Attempts [count]
22:09:32 <ef*fail2ban> Description: The number of allowed failed login attempts.
22:09:32 <ef*fail2ban> ------
22:09:32 <ef*fail2ban> Command: Ban <hosts>
22:09:32 <ef*fail2ban> Description: Ban the specified hosts.
22:09:32 <ef*fail2ban> ------
22:09:32 <ef*fail2ban> Command: Help search
22:09:32 <ef*fail2ban> Description: Generate this output
22:09:32 <ef*fail2ban> ------
22:09:32 <ef*fail2ban> Command: List 
22:09:32 <ef*fail2ban> Description: List banned hosts.
22:09:32 <ef*fail2ban> ------
22:09:32 <ef*fail2ban> Command: Timeout [minutes]
22:09:32 <ef*fail2ban> Description: The number of minutes IPs are blocked after a failed login.
22:09:32 <ef*fail2ban> ------
22:09:32 <ef*fail2ban> Command: Unban <hosts>
22:09:32 <ef*fail2ban> Description: Unban the specified hosts.
22:09:32 <ef*fail2ban> ------
22:11:37 <jockek> ban 127.0.0.2
22:11:37 <ef*fail2ban> Banned: 127.0.0.2
22:11:37 <jockek> list
22:11:37 <ef*fail2ban> ------
22:11:37 <ef*fail2ban> Host: 127.0.0.2
22:11:37 <ef*fail2ban> Attempts: 0
22:11:37 <ef*fail2ban> ------
22:11:42 <jockek> unban 127.0.0.2
22:11:42 <ef*fail2ban> Unbanned: 127.0.0.2
22:10:01 <jockek> timeout 5
22:10:01 <ef*fail2ban> Timeout: 5 min
Hi, Non-admin users should not be allowed to configure or use the globally loaded fail2ban module. Currently a non-admin user can change the parameters, and can also use the commands to ban/unban hosts. ``` znc@znc.in (EFNet) 22:09:31 -!- Irssi: Starting query in EFNet with ef*fail2ban 22:09:32 <jockek> help 22:09:32 <ef*fail2ban> ------ 22:09:32 <ef*fail2ban> Command: Attempts [count] 22:09:32 <ef*fail2ban> Description: The number of allowed failed login attempts. 22:09:32 <ef*fail2ban> ------ 22:09:32 <ef*fail2ban> Command: Ban <hosts> 22:09:32 <ef*fail2ban> Description: Ban the specified hosts. 22:09:32 <ef*fail2ban> ------ 22:09:32 <ef*fail2ban> Command: Help search 22:09:32 <ef*fail2ban> Description: Generate this output 22:09:32 <ef*fail2ban> ------ 22:09:32 <ef*fail2ban> Command: List 22:09:32 <ef*fail2ban> Description: List banned hosts. 22:09:32 <ef*fail2ban> ------ 22:09:32 <ef*fail2ban> Command: Timeout [minutes] 22:09:32 <ef*fail2ban> Description: The number of minutes IPs are blocked after a failed login. 22:09:32 <ef*fail2ban> ------ 22:09:32 <ef*fail2ban> Command: Unban <hosts> 22:09:32 <ef*fail2ban> Description: Unban the specified hosts. 22:09:32 <ef*fail2ban> ------ 22:11:37 <jockek> ban 127.0.0.2 22:11:37 <ef*fail2ban> Banned: 127.0.0.2 22:11:37 <jockek> list 22:11:37 <ef*fail2ban> ------ 22:11:37 <ef*fail2ban> Host: 127.0.0.2 22:11:37 <ef*fail2ban> Attempts: 0 22:11:37 <ef*fail2ban> ------ 22:11:42 <jockek> unban 127.0.0.2 22:11:42 <ef*fail2ban> Unbanned: 127.0.0.2 22:10:01 <jockek> timeout 5 22:10:01 <ef*fail2ban> Timeout: 5 min ``` <!-- github-sync-id:154095732 -->
adam closed this issue 2026-10-05 04:39:40 +02:00
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/znc#704