YunoHost/yunohost
1
0
Fork 0
mirror of https://github.com/YunoHost/yunohost.git synced 2024-09-03 20:06:10 +02:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #438 from YunoHost/emaged-fail2ban-conf-was-broken-wtf

Browse source 
[fix] [critical] Fail2ban conf/filter was not matching failed login attempts...
This commit is contained in:
Laurent Peuch 2018-03-06 21:36:35 +01:00 • committed by GitHub
commit a80f7471bd
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
data/templates/fail2ban/jail.conf
View file

@ -581,5 +581,6 @@ enabled = true
port = http,https port = http,https
protocol = tcp protocol = tcp
filter = yunohost filter = yunohost
logpath = /var/log/nginx*/*error.log logpath = /var/log/nginx/*error.log
/var/log/nginx/*access.log
maxretry = 6 maxretry = 6

4
data/templates/fail2ban/yunohost.conf
View file

@ -14,8 +14,8 @@
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+) # (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
# Values: TEXT # Values: TEXT
# #
failregex = helpers.lua:[1-9]+: authenticate\(\): Connection failed for: .*, client: <HOST> failregex = helpers.lua:[0-9]+: authenticate\(\): Connection failed for: .*, client: <HOST>
^<HOST> -.*\"POST /yunohost/api/login HTTP/1.1\" 401 22 ^<HOST> -.*\"POST /yunohost/api/login HTTP/1.1\" 401
# Option: ignoreregex # Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored. # Notes.: regex to ignore. If this regex matches, the line is ignored.