mirror of https://github.com/fail2ban/fail2ban
Merge 65ef68b83d
into 86b9adb2f5
commit
5f8546873b
|
@ -6,7 +6,7 @@ check-hidden = true
|
||||||
# Try to identify incomplete words which are part of a regex, hence having [] at the beginning
|
# Try to identify incomplete words which are part of a regex, hence having [] at the beginning
|
||||||
# Ignore all urls as something with :// in it
|
# Ignore all urls as something with :// in it
|
||||||
# Ignore all lines with codespell-ignore in them for pragma annotation
|
# Ignore all lines with codespell-ignore in them for pragma annotation
|
||||||
ignore-regex = (\b([A-Z][A-Z][A-Z]+|gir\.st)\b)|\[[a-zA-Z]+\][a-z]+\b|[a-z]+://\S+|.*codespell-ignore.*
|
ignore-regex = (\b([A-Z][A-Z][A-Z]+|gir\.st)\b)|\[[a-zA-Z]+\][a-z]+\b|[a-z]+://\S+|^\w*bots\w*\s*=.*|.*codespell-ignore.*
|
||||||
# some oddly named variables, some names, etc
|
# some oddly named variables, some names, etc
|
||||||
# wee -- comes in regex etc for weeks
|
# wee -- comes in regex etc for weeks
|
||||||
ignore-words-list = assertIn,theis,timere,alls,wee,wight,ans,re-use,pre-emptive
|
ignore-words-list = assertIn,theis,timere,alls,wee,wight,ans,re-use,pre-emptive
|
||||||
|
|
File diff suppressed because one or more lines are too long
|
@ -34,16 +34,12 @@
|
||||||
#
|
#
|
||||||
#-----------------\____________________________________/------------------
|
#-----------------\____________________________________/------------------
|
||||||
|
|
||||||
url=http://www.user-agents.org/index.shtml
|
url=https://raw.githubusercontent.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker/master/_generator_lists/bad-user-agents.list
|
||||||
badbots=$(
|
badbots=$(
|
||||||
for f in "" "?g_m" "?moz" "?n_s" "?t_z"; do
|
curl -sS $url \
|
||||||
wget -q -O- $url$f;
|
|
||||||
done \
|
|
||||||
| grep -h -B4 '<td class="smallcell" nowrap>S </td>'\
|
|
||||||
| sed -e 's/ //g' \
|
|
||||||
| awk '/^--/{getline; gsub(" ",""); print $0}' \
|
|
||||||
| sed -e 's/\([.\:|()+]\)/\\\1/g' \
|
|
||||||
| uniq \
|
| uniq \
|
||||||
|
| sed -e 's/\\ / /g' \
|
||||||
|
| sed -e 's/\([.\:|()+]\)/\\\1/g' \
|
||||||
| tr '\n' '|' \
|
| tr '\n' '|' \
|
||||||
| sed -e 's/|$//g'
|
| sed -e 's/|$//g'
|
||||||
)
|
)
|
||||||
|
@ -60,13 +56,18 @@ cat >| config/filter.d/apache-badbots.conf <<EOF
|
||||||
|
|
||||||
[Definition]
|
[Definition]
|
||||||
|
|
||||||
badbotscustom = EmailCollector|WebEMailExtrac|TrackBack/1\.02|sogou music spider
|
badbotscustom = EmailCollector|WebEMailExtrac|TrackBack/1\.02|sogou music spider|(?:Mozilla/\d+\.\d+ )?Jorgee
|
||||||
badbots = $badbots
|
badbots = $badbots
|
||||||
|
|
||||||
failregex = ^<HOST> -.*"(GET|POST).*HTTP.*"(?:%(badbots)s|%(badbotscustom)s)"$
|
requri = /\S*
|
||||||
|
rescode = \d+
|
||||||
|
failregex = ^<ADDR> [^"]*"[A-Z]+\s+%(requri)s\s+[^"]*" %(rescode)s \d+ "[^"]*" "(?:%(badbots)s|%(badbotscustom)s)"$
|
||||||
|
|
||||||
ignoreregex =
|
ignoreregex =
|
||||||
|
|
||||||
|
datepattern = ^[^\[]*\[({DATE})
|
||||||
|
{^LN-BEG}
|
||||||
|
|
||||||
# DEV Notes:
|
# DEV Notes:
|
||||||
# List of bad bots fetched from http://www.user-agents.org
|
# List of bad bots fetched from http://www.user-agents.org
|
||||||
# Generated on `date` by $0.
|
# Generated on `date` by $0.
|
||||||
|
|
Loading…
Reference in New Issue