NodeBB 1.13.3 - OSSEC issue



  • I use NodeBB 1.13.3 on Ubuntu 18.04 where OSSEC is also installed on.

    While using NodeBB, after some clicks I get the following message from OSSEC:

    "High amount of POST requests in a small period of time (likely bot)."

    Then my IP address gets blocked 🙂

    If I stop ossec, then all works fine.

    Any idea how to resolve this - much appreciated !



  • I have resolved this issue by adding the following rule to local_rules.xml.

    <rule id="100014" level="0">
    <if_sid>31533</if_sid>
    <url>^/socket.io/</url>
    <description>Ignoring NodeBB (socket.io).</description>
    </rule>


Log in to reply
 

Suggested Topics

  • 13
  • 1
  • 3
  • 10
  • 2
| |