nextcloud/suspicious_login

Allow list for IPs

francoisPE opened this issue · 2 comments

Hello,
I use your app in my nextcloud, called (a)
This one is connected to another one, called (b)
It works well and it is very interesting except :
Suspicious_login of (b) is considering webdav call of (a) as suspiscious.

I try
php occ suspiciouslogin:train
php occ suspiciouslogin:etl
php occ suspiciouslogin:optimize

Nothing changed

I would propose to add a whitelist in the code in order to whitelist some IPs
What do you think ?

Oh yes, please - finally an IP based whitelist! Like we have for the native bruteforce protection.

+1 The current behavior doesn't converge efficiently with IPv6 adresses using /64 mask.