ajout choix ssh only ou nginx filters + debug

2026-08-25 02:45:28 +02:00 · 2023-02-03 16:45:03 +01:00
parent b36d73173b
commit f55af5829e
4 changed files with 65 additions and 23 deletions
@@ -0,0 +1,76 @@
+[DEFAULT]
+
+ignoreip = 127.0.0.1/8 IP
+bantime = 3600
+findtime = 3600
+#mta = mail
+#destemail = 
+#sendername = Fail2BanAlerts
+#action = %(action_mwl)s
+
+[nginx-http-auth]
+
+enabled  = true
+filter   = nginx-http-auth
+port     = http,https
+logpath  = /var/log/nginx/*error.log
+bantime = 259200
+
+[nginx-badbots]
+
+enabled = true
+port = http,https
+filter = nginx-badbots
+failregex = ^<HOST> -.*"(GET|POST|HEAD).*HTTP.*" 437
+#ignoreregex =
+backend = auto
+logpath = /var/log/nginx/*access.log
+bantime = 259200
+maxretry= 1
+
+[nginx-nohome]
+
+enabled  = true
+port     = http,https
+filter   = nginx-nohome
+logpath  = /var/log/nginx/*access.log
+bantime = 259200
+maxretry = 2
+
+[nginx-noproxy]
+
+enabled  = true
+port     = http,https
+filter   = nginx-noproxy
+logpath  = /var/log/nginx/*access.log
+bantime = 259200
+maxretry = 2
+
+[nginx-req-limit] 
+
+enabled = true 
+filter = nginx-req-limit 
+action = iptables-multiport[name=ReqLimit, port="http,https", protocol=tcp] 
+logpath = /var/log/nginx/*error.log 
+findtime = 600 
+bantime = 259200
+maxretry = 10 
+
+[nginx-conn-limit] 
+
+enabled = true 
+filter = nginx-conn-limit 
+action = iptables-multiport[name=ConnLimit, port="http,https", protocol=tcp] 
+logpath = /var/log/nginx/*error.log 
+findtime = 300 
+bantime = 259200
+maxretry = 100
+
+[ssh]
+
+enabled = true
+port = SSH_PORT
+filter = sshd
+logpath = /var/log/auth.log
+maxretry = 3
+bantime = -1