github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

Merge 811bcfe6f3 into dc899e438f

pull/3120/merge
Giuseppe499 2025-07-07 01:23:37 -04:00 committed by GitHub
parent dc899e438f 811bcfe6f3
commit 500b2a3bbc
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
config/filter.d/haproxy-http-auth.conf
View File

@ -7,7 +7,7 @@
# In other words, even successful logins will have at least 1 fail regex match.
# Please keep this in mind when setting findtime and maxretry for jails.
#
# Author: Jordan Moeser
# Author: Jordan Moeser, Giuseppe Scarlato
#
[INCLUDES]
@ -28,7 +28,7 @@ _daemon = haproxy
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
# Values: TEXT
#
failregex = ^%(__prefix_line)s<HOST>(?::\d+)?\s+.*<NOSRV> -1/-1/-1/-1/\+*\d* 401
failregex = ^%(__prefix_line)s<HOST>(?::\d+)?\s+.*<NOSRV> (?:\d+|-1)/-1/-1/-1/\+?\d+ 401
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.

10
fail2ban/tests/files/logs/haproxy-http-auth
View File

@ -6,3 +6,13 @@ Nov 14 22:45:11 test haproxy[760]: 192.168.33.1:58430 [14/Nov/2015:22:45:11.608]
Nov 14 22:45:11 test haproxy[760]: 2001:db8::1234:58430 [14/Nov/2015:22:45:11.608] main main/<NOSRV> -1/-1/-1/-1/0 401 248 - - PR-- 0/0/0/0/0 0/0 "GET / HTTP/1.1"
# failJSON: { "time": "2004-11-14T22:45:11", "match": true , "host": "192.168.33.1" }
Nov 14 22:45:11 test haproxy[760]: ::ffff:192.168.33.1:58430 [14/Nov/2015:22:45:11.608] main main/<NOSRV> -1/-1/-1/-1/0 401 248 - - PR-- 0/0/0/0/0 0/0 "GET / HTTP/1.1"
# failJSON: { "time": "2004-10-11T15:02:29", "match": true , "host": "192.168.1.54" }
Oct 11 15:02:29 localhost haproxy[838]: 192.168.1.54:48556 [11/Oct/2021:15:02:29.601] public~ public/<NOSRV> 0/-1/-1/-1/0 401 256 - - LR-- 2/2/0/0/0 0/0 "GET / HTTP/1.1"
# failJSON: { "time": "2004-10-11T15:02:29", "match": true , "host": "192.168.1.54" }
Oct 11 15:02:29 localhost haproxy[838]: 192.168.1.54:48556 [11/Oct/2021:15:02:29.601] public~ public/<NOSRV> 154/-1/-1/-1/+154 401 256 - - LR-- 2/2/0/0/0 0/0 "GET / HTTP/1.1"
# failJSON: { "time": "2004-10-11T15:02:29", "match": false , "host": "192.168.1.54" }
Oct 11 15:02:29 localhost haproxy[838]: 192.168.1.54:48556 [11/Oct/2021:15:02:29.601] public~ public/<NOSRV> 154/-1/-1/-1/++154 401 256 - - LR-- 2/2/0/0/0 0/0 "GET / HTTP/1.1"
# failJSON: { "time": "2004-10-11T15:02:29", "match": false , "host": "192.168.1.54" }
Oct 11 15:02:29 localhost haproxy[838]: 192.168.1.54:48556 [11/Oct/2021:15:02:29.601] public~ public/<NOSRV> 154/-1/-1/-1/+ 401 256 - - LR-- 2/2/0/0/0 0/0 "GET / HTTP/1.1"
# failJSON: { "time": "2004-10-11T15:02:29", "match": false , "host": "192.168.1.54" }
Oct 11 15:02:29 localhost haproxy[838]: 192.168.1.54:48556 [11/Oct/2021:15:02:29.601] public~ public/<NOSRV> 401/-1/-1/-1/401 302 256 - - LR-- 2/2/0/0/0 0/0 "GET / HTTP/1.1"