NodeBB 1.13.3 - OSSEC issue


  • I use NodeBB 1.13.3 on Ubuntu 18.04 where OSSEC is also installed on.

    While using NodeBB, after some clicks I get the following message from OSSEC:

    "High amount of POST requests in a small period of time (likely bot)."

    Then my IP address gets blocked 🙂

    If I stop ossec, then all works fine.

    Any idea how to resolve this - much appreciated !


  • I have resolved this issue by adding the following rule to local_rules.xml.

    <rule id="100014" level="0">
    <if_sid>31533</if_sid>
    <url>^/socket.io/</url>
    <description>Ignoring NodeBB (socket.io).</description>
    </rule>

Suggested Topics

| |