anonymous WP-plugins

I see what you’re doing, but I don’t understand why you’re doing it.

Can you explain what you’re trying to achieve please?

The original value of $_SERVER[‘REMOTE_ADDR’] is changed by some
anonymous plugins. My remote IP, for example, is 192.168.1.123, but
the anonymous plugin makes it 192.168.0.0 or 0.0.0.0 etc.
see anonymous code examples

if ($options[‘anonymize-user’]==1) {
$_SERVER[“REMOTE_ADDR”] = “0.0.0.0”; }

or

$_SERVER[‘REMOTE_ADDR’] = getAnonymIp($_SERVER[‘REMOTE_ADDR’]);

But I want to use the original remote address for fail2ban. I secure
the original value in a variable WP_FAIL2BAN_ORIGINAL_REMOTE_ADDR,
so that it appears correctly in the logs. The remote_addr function has
a changed return value of $_SERVER[‘REMOTE_ADDR’]. But I need the value
of WP_FAIL2BAN_ORIGINAL_REMOTE_ADDR in my auth.log.

Do you understand my problem? ??

greetings,
pruno

OK, wow – I think we’ve just defined “edge case” ??

You should be able to do that without modifying the plugin by putting this in wp-config.php:

define(‘WP_FAIL2BAN_PROXIES’,’0.0.0.0′);
$_SERVER[‘HTTP_X_FORWARDED_FOR’] = $_SERVER[‘REMOTE_ADDR’];

(N.B. I’ve not actually tested that, but it should work).

Basically, you pretend you’re behind a proxy; you set the trusted IP to 0.0.0.0 (the code is deliberately dumb so doesn’t flag this as invalid), and store the real IP in what would have been the X-Forwarded-For header.

It’s a complete hack of course, and will break things if you’re actually behind a proxy, but at least your changes won’t be overwritten when I release 3.5.4 tomorrow.

Is the anonymising plugin something I can download and look at? Obviously I can add another option to WPf2b, but I want to be sure I’m addressing the whole problem.

To test, please create a simple plug-in itself. In plugins folder
simply create a new directory ‘anonymize’ and create a file index.php

<?php
/*
Plugin Name: Anonymize IP
Description: Overwrite the original remote IP
Author: selfmade
Version: 0.1
*/
$_SERVER[“REMOTE_ADDR”] = “0.0.0.0”; // or another value
?>

For testing you can now activate this plugin. ??

For a code sample in a WP theme in the wilderness with changes
to the remote IP, you can see one, for example here:

https://github.com/xwolfde/Piratenkleider/blob/master/functions.php

greetings,
pruno