Configure Site Security with the minOrange Drupal Website Security module

Overview

The miniOrange Website Security module provides login security, registration security, brute force attack prevention, IP monitoring and IP blacklisting, Rate Limiting (DOS attack prevention), strong password enforcement, bot blocking, and more. In this guide, we’ll walk through the configuration of Site Security and demonstrate its functionality. The module is compatible with Drupal 8, Drupal 9, Drupal 10, and Drupal 11.

Download Schedule a Meeting

Installation Steps

Configuration Steps

• Go to Configuration → People → miniOrange Website Security Configuration in the Administration menu.
  

  {BaseURL}/admin/config/people/security_login_secure/WebsiteSecurityConfiguration

• Navigate to the Site Security tab to configure the module features.

Blocking / Whitelisting:

• Enable IP Blocking: This feature allows blocking specific IP addresses from accessing the site.
• To enable this feature, toggle the button of Enable IP Blocking.
• After that, enter the IPs to be blocked in the Manual Block IPs field. You can add multiple IPs by separating them with semicolons (;).
• Click on the Save Configuration button.

• Enable IP Whitelisting: IP whitelisting allows you to create lists of trusted IP addresses or IP ranges from which your users can access your domains.
• To enable this feature, turn on the Enable IP Whitelisting button.
• After that, enter the IPs to be whitelisted in the Whitelist IPs field. You can add multiple IPs by separating them with semicolons (;).
• Turn on the Enable User whitelisting if IP is whitelisted button, if you want to prevent site users from being blocked if their IP is whitelisted. If it's not enabled, users will still be blocked after 5 failed attempts, even from a whitelisted IP (as per Drupal's default behaviour).
• Click on the Save Configuration button.

Blocked IP and Users:

• To see blocked IPs and users, navigate to the Blocked IP and Users tab of the module.
• Admins have actionable controls directly within the reports, including the ability to unblock IP addresses and user accounts as needed. For further analysis or record-keeping, the entire report can be exported in CSV format.

Why choose us:

24/7 Support

The Drupal developers at miniOrange offer quick and active support for your queries. We can assist you from choosing the best solution for your use case to deploying and maintaining the solution.

 Contact us

Case Studies

miniOrange has successfully catered to the use cases of 400+ trusted customers with its highly flexible/customizable Drupal solutions.

 Read more

Other Solutions

Feel free to explore other Drupal solutions that we offer the popular solutions used by our trusted customers include 2FA, User Provisioning, Website Security.

 Know More