----- On Apr 17, 2021, at 6:12 PM, Peter Heirich [email protected] wrote:
> Of course, could be possible, but is a bad idea, i think. > Lets take a look on a access line. > [17/Apr/2021:16:50:41 +0200] [myserver.server4you.de:80] [client > 40.121.52.49] - > - "GET /.env HTTP/1.1" 404 463 "-" "Mozilla/5.0 (X11; Linux x86_64) > AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" > 404 after HTTP/1.1 is the status code you are talking about. > However, a typo in url causes the same code. > Better way, i think, is to use the same way plesk obsidian powered server do: > run modsecurity > ( see german language tutorial [ > https://www.howtoforge.de/anleitung/sichere-dein-apache-mit-mod_security/ | > https://www.howtoforge.de/anleitung/sichere-dein-apache-mit-mod_security/ ] ) > Use a free rule set like the comodo one ( [ > https://www.comodo.com/home/internet-security/free-internet-security.php | > https://www.comodo.com/home/internet-security/free-internet-security.php ] ) > And finaly put IPs, which causes a log entry of mod_security to jail. > greetings from Berlin Hi Peter, thaks for your E-Mail. OK. A typo also may cause an error code. But what is if i make a jail for someone which causes 5 or ten error codes in let's say a minute or two ? Fail2ban should be able to do this. 5 or ten error codes with a typo ... not so likely. Bernd
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
