About: GHF Forum Team

Thank you for your understanding :)

Each subsite has its own preferences regarding these restrictions, I understand that very well. The plugin is network activated and the main site (Blog A, let’s call it, works great). We set the preferences for each individual sites with great care.

New members registering on Blog A are automatically added to some of the subsites (via the Multisite User management plugin).

On one of these subsites (Blog B), we needed a login page. So, we have configured the membership option page as well as the login welcome page through your fine s2Members plugin. On Blog B and Blog A separately, the “Brute Force IP/Login Restrictions” sections are set to “Allow 3 failed login attempts (then punish for 30 minutes)”. Unfortunately, in Blog B, these settings aren’t taken into account and bots hammer Blog B’s login page.

I hope I am making myself clear. Do not hesitate to ask further questions if it isn’t the case.

Kind regards,

Evren from the GHF Team

Dear Cristián,

I am aware of how it’s supposed to work, thank you. I have done that exactly as you mention. But even though the restrictions are set on the subsite, they are ineffectual and we’re having attackers hammering us. I would love to understand and fix this as soon as possible.

Thanks for helping,