Mercurial > repos > other > Puppet

comparison common/fail2ban/ibb-repeat-offender.conf @ 43:5b9ba754d2ff

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Update the "repeat offender" rule so that a) it works, and b) "already banned"* also counts as repeat * i.e. quick bombardments that get multiple hits in the rules before Fail2Ban had a chance to process them
author IBBoard <dev@ibboard.co.uk>
date Sat, 11 Apr 2015 08:21:12 +0000
parents 956e484adc12
children 8fa6623f1e5f
comparison
equal deleted inserted replaced
34:29d330d2056a 43:5b9ba754d2ff
14 # host must be matched by a group named "host". The tag "<HOST>" can 14 # host must be matched by a group named "host". The tag "<HOST>" can
15 # be used for standard IP/hostname matching and is only an alias for 15 # be used for standard IP/hostname matching and is only an alias for
16 # (?:::f{4,6}:)?(?P<host>[\w\-.^_]+) 16 # (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
17 # Values: TEXT 17 # Values: TEXT
18 # 18 #
19 failregex = fail2ban.actions:\s+WARNING\s+\[(?:.*)\]\s+Ban\s+<HOST> 19 failregex = WARNING\s+\[(?:.*)\]\s+Ban\s+<HOST>
20 INFO\s+\[(?:.*)\]\s+<HOST> already banned
20 21
21 # Option: ignoreregex 22 # Option: ignoreregex
22 # Notes.: regex to ignore. If this regex matches, the line is ignored. 23 # Notes.: regex to ignore. If this regex matches, the line is ignored.
23 # Values: TEXT 24 # Values: TEXT
24 # 25 #