18,11 → 18,14 |
|
# The DEFAULT allows a global definition of the options. They can be overridden |
# in each jail afterwards. |
|
[DEFAULT] |
|
# "ignoreip" can be an IP address, a CIDR mask or a DNS host. Fail2ban will not |
# ban a host which matches an address in this list. Several addresses can be |
# defined using space separator. |
ignoreip = 127.0.0.1/8 |
|
# "bantime" is the number of seconds that a host is banned. |
bantime = 180 |
|
124,6 → 127,7 |
# Adapted by ALCASAR team |
|
[Definition] |
|
# Option: failregex |
# Notes.: regex to match the password failure messages in the logfile. The |
# host must be matched by a group named "host". The tag "<HOST>" can |
130,9 → 134,13 |
# be used for standard IP/hostname matching and is only an alias for |
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+) |
# Values: TEXT |
# |
failregex = <HOST> .+\] "[^"]+" 403 |
|
# Option: ignoreregex |
# Notes.: regex to ignore. If this regex matches, the line is ignored. |
# Values: TEXT |
# |
ignoreregex = |
EOF |
|
146,6 → 154,7 |
# Adapted by ALCASAR team |
|
[Definition] |
|
# Option: failregex |
# Notes.: regex to match the password failure messages in the logfile. The |
# host must be matched by a group named "host". The tag "<HOST>" can |
152,9 → 161,15 |
# be used for standard IP/hostname matching and is only an alias for |
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+) |
# Values: TEXT |
# |
failregex = <HOST> .+\] "[^"]+" 401 |
|
#[[]auth_digest:error[]] [[]client <HOST>:[0-9]\{1,5\}[]] |
|
# Option: ignoreregex |
# Notes.: regex to ignore. If this regex matches, the line is ignored. |
# Values: TEXT |
# |
ignoreregex = |
EOF |
|
168,6 → 183,7 |
# Adapted by ALCASAR team |
|
[Definition] |
|
# Option: failregex |
# Notes.: regex to match the password failure messages in the logfile. The |
# host must be matched by a group named "host". The tag "<HOST>" can |
174,9 → 190,13 |
# be used for standard IP/hostname matching and is only an alias for |
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+) |
# Values: TEXT |
# |
failregex = <HOST> .* \"GET \/intercept\.php\?res=failed\&reason=reject |
|
# Option: ignoreregex |
# Notes.: regex to ignore. If this regex matches, the line is ignored. |
# Values: TEXT |
# |
ignoreregex = |
EOF |
|
191,6 → 211,7 |
# Adapted by ALCASAR team |
|
[Definition] |
|
# Option: failregex |
# Notes.: regex to match the password failure messages in the logfile. The |
# host must be matched by a group named "host". The tag "<HOST>" can |
197,8 → 218,13 |
# be used for standard IP/hostname matching and is only an alias for |
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+) |
# Values: TEXT |
# |
failregex = <HOST> .* \"POST \/password\.php |
|
|
# Option: ignoreregex |
# Notes.: regex to ignore. If this regex matches, the line is ignored. |
# Values: TEXT |
# |
ignoreregex = |
EOF |