diff common/fail2ban/ibb-repeat-offender.conf @ 195:f70831cc2864 puppet-3.6

Separate out SSH repeats from web/email repeats Hopefully this should prevent accidental lock-outs! Worst case, I trigger a web lock-out and get back in on SSH.
author IBBoard <dev@ibboard.co.uk>
date Wed, 17 Apr 2019 12:00:31 +0100
parents 8fa6623f1e5f
children
line wrap: on
line diff
--- a/common/fail2ban/ibb-repeat-offender.conf	Wed Apr 10 20:11:55 2019 +0100
+++ b/common/fail2ban/ibb-repeat-offender.conf	Wed Apr 17 12:00:31 2019 +0100
@@ -2,9 +2,7 @@
 #
 # Author: Tom Hendrikx, minor modifications by Amir Caspi
 # See http://whyscream.net/wiki/index.php/Fail2ban_monitoring_Fail2ban
-# Renamed by IBBoard for consistency
-#
-# $Revision: 1 $
+# Renamed and adjusted by IBBoard for consistency
 #
 
 [Definition]
@@ -22,4 +20,4 @@
 # Notes.:  regex to ignore. If this regex matches, the line is ignored.
 # Values:  TEXT
 #
-ignoreregex = fail2ban.actions:\s+NOTICE\s+\[(ibb-repeat-offender|[^\]]+warning)\]\s+Ban\s+<HOST>
+ignoreregex = fail2ban.actions:\s+NOTICE\s+\[(ibb-repeat-offender|ssh-)[^\]]+\]\s+Ban\s+<HOST>