Ban /48 or /56 subnets instead of single IPv6

Feature Requests
1

AFAIK, the integrated brute force protection only blocks single IPv4 or IPv6.

That approach is no longer working for IPv6.

A single home user that gets a /48 prefix, can attack with 1,208,925,819,614,629,174,706,176 addresses.

A single home user that gets a /56 prefix, can attack with 4,722,366,482,869,645,213,696 unique addresses.

So instead I would like to Vaultwarden to ban /48 or /56 subnets.

PS: Same problem made fail2ban useless, last time I checked.

1 Like
2

Iā€™m using reaction instead of fail2ban to easily ban /64 subnets. Also it uses way less resources than fail2ban, so I recommend it.

2 Likes