wiki:fail2ban_examples
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
wiki:fail2ban_examples [2022/12/22 11:33] – add more references antisa | wiki:fail2ban_examples [2022/12/27 13:27] – [Port 80 ban] change config examples and log lines antisa | ||
---|---|---|---|
Line 13: | Line 13: | ||
logpath | logpath | ||
- | This will create a '' | + | This will create a '' |
- | | + | < |
- | failregex = client=< | + | [Definition] |
+ | failregex = ^< | ||
+ | |||
+ | ignoreregex = | ||
| | ||
- | ignoreregex = | + | datepattern = ^[^\[]*\[({DATE}) |
- | + | </ | |
- | | + | |
**< | **< | ||
Line 27: | Line 29: | ||
action is defined already in /// | action is defined already in /// | ||
</ | </ | ||
+ | |||
+ | Restart fail2ban: | ||
+ | systemctl restart fail2ban.service | ||
This will now ban http request for 60 seconds from any client if it tries to access the site on port 80 more than 4 times within 60s. It will create a new iptables chain named f2b-bloKKKED. Truncated '' | This will now ban http request for 60 seconds from any client if it tries to access the site on port 80 more than 4 times within 60s. It will create a new iptables chain named f2b-bloKKKED. Truncated '' | ||
Line 65: | Line 70: | ||
Failregex: 42 total | Failregex: 42 total | ||
|- #) [# of hits] regular expression | |- #) [# of hits] regular expression | ||
- | | 1) [42] client=< | + | | 1) [42] ^< |
`- | `- | ||
Line 82: | Line 87: | ||
< | < | ||
- | "08/Nov/2022:15:36:30 +0100" client=10.21.21.1 method=GET request="GET / HTTP/ | + | 10.21.21.1 - - [27/Dec/2022:11:57:15 +0100] "GET / HTTP/ |
- | "08/Nov/2022:15:37:35 +0100" client=10.21.21.1 method=GET request="GET / HTTP/ | + | 10.21.21.1 |
</ | </ | ||
Line 94: | Line 99: | ||
then check the log file again. | then check the log file again. | ||
+ | ===== Timezone issue ===== | ||
+ | If you have a [[https:// | ||
+ | 2022-12-27 11: | ||
+ | 2022-12-27 11: | ||
+ | check your filter' | ||
====== Tested on ====== | ====== Tested on ====== | ||
* fail2ban 0.11.2 | * fail2ban 0.11.2 |
wiki/fail2ban_examples.txt · Last modified: 2024/03/06 14:02 by antisa