Difference between revisions of "FAIL2BAN - Filter.d - http-403"

From wiki.1001solutions.net
(Created page with " = Filter.d = <nowiki> [Definition] failregex = <HOST> - - .*HTTP/[0-9]+(.[0-9]+)?" 403 [client <HOST>] AH01797: client denied </nowiki> = Jail.conf = <now...")
 
Line 4: Line 4:
  
 
  <nowiki>
 
  <nowiki>
 +
# /etc/fail2ban/filter.d/http.403.conf
 +
#
 +
#
 
[Definition]
 
[Definition]
 
failregex = <HOST> - - .*HTTP/[0-9]+(.[0-9]+)?" 403
 
failregex = <HOST> - - .*HTTP/[0-9]+(.[0-9]+)?" 403

Revision as of 05:29, 28 March 2020


Filter.d

# /etc/fail2ban/filter.d/http.403.conf
#
#
[Definition]
failregex = <HOST> - - .*HTTP/[0-9]+(.[0-9]+)?" 403
            [client <HOST>] AH01797: client denied


Jail.conf

[http-403]
enabled = true
port = http,https
logpath = /var/log/nginx/*error*.log
          /var/log/nginx/*access*.log
bantime = 999999999
maxretry = 10
findtime = 600