0

Disable XMLRPC -> results in errors in Nginx Site Error Log. Suggestion to no longer log these.


Avatar
Castor

Here is a suggestion for possible improvement.

When you "Disable XMLRPC" in the Security tab, any attempt to reach xmlrpc.php will be logged in the Nginx Site Error Log like this:

2022/05/23 13:02:04 [error] 29860#29860: *10615 access forbidden by rule, client: xxx.xxx.xxx.xxx, server: www.example.com, request: "POST /xmlrpc.php HTTP/1.1", host: "www.example.com"

In practice this means for me that >95% of Nginx Site Error Logs are filled with these "errors" which is basically noise and which also makes it harder to see actually relevant real error messages.

So, while perhaps technically it may be an error, in my view it would make sense to not classify/log these as error because we disabled this on purpose. That would remove this noise from error logs, making them more usable. What do you think?

A

Activity Newest / Oldest

S

Steve Bell

Status changed to: Closed

S

Steve Bell

Sorry Castor. Appreciate the request, but this would be a non-trivial amount of work for something that would likely cause more problems than it solves.


Avatar

Castor

No worries. I see what you mean, fair enough.
Meanwhile I figured out another way to solve this. I created a firewall rule in Cloudflare-> (http.request.uri contains "/xmlrpc.php") -> block


  • S