fail2ban/config/filter.d/lighttpd-auth.conf

# Fail2Ban configuration file
#
# Author: Francois Boulogne <fboulogne@april.org>
#

[Definition]

# Option:  failregex
# Notes.:  regex to match wrong passwords as notified by lighttpd's auth Module
# Values:  TEXT
#
failregex = .*http_auth.*(password doesn\'t match|wrong password).*IP: <HOST>\s*$

# Option:  ignoreregex
# Notes.:  regex to ignore. If this regex matches, the line is ignored.
# Values:  TEXT
#
ignoreregex =
add filter for lighttpd mod_auth failure 13 years ago			`# Fail2Ban configuration file`
			`#`
			`# Author: Francois Boulogne <fboulogne@april.org>`
			`#`

			`[Definition]`

			`# Option: failregex`
			`# Notes.: regex to match wrong passwords as notified by lighttpd's auth Module`
			`# Values: TEXT`
			`#`
ENH: join both failregex for lighttpd-auth into a single one they are close in meaning should provide a slight run-time performance benefit 12 years ago			`failregex = .http_auth.(password doesn\'t match\|wrong password).IP: <HOST>\s$`
add filter for lighttpd mod_auth failure 13 years ago
			`# Option: ignoreregex`
			`# Notes.: regex to ignore. If this regex matches, the line is ignored.`
			`# Values: TEXT`
			`#`
			`ignoreregex =`