On 03/29/2015 09:39 AM, Anthony Griffiths wrote: > I'm running fail2ban-0.8.14-1.el6.noarch on centos 6.6 64bit. > apache-nohome does not recognise the 'File does not exist' entries > littered throughout my *error_log and is not banning the offending > ip's. > This is a typical line from my httpd error log: > > [Fri Mar 27 16:16:35 2015] [error] [client 78.186.48.103] File does > not exist: /var/www/html/my-domain.com/html/site
That does not appear to be a home directory (note the tilde in the failregex). > I have the default apache-nohome,conf with this failregex in it: > > failregex = ^%(_apache_error_client)s (AH00128: )?File does not exist: .*/~.* > > however if I run > /usr/bin/fail2ban-regex > /var/log/httpd/my-domain.com-error_log-20150329 > /etc/fail2ban/filter.d/apache-nohome.conf > > I get Failregex: 0 total > and yet there are loads of File does not exist entries in the log. Do > I need to edit the failregex line and if so how? I've tried a few > edits/ideas myself but so far no luck. Take a look at the apache-botsearch jail, and I think you'll need to add 'block' to identify the URL you are keying off of for blocking people. > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > Fail2ban-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/fail2ban-users ------------------------------------------------------------------------------ Dive into the World of Parallel Programming The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/ _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
