FAIL2BAN - Filter.d - http-403

Return to Wiki Index

! Should be customized to your needs !

Filter.d

[Definition]
failregex = <HOST> - - .*HTTP/[0-9]+(.[0-9]+)?" 403
#            [client <HOST>] AH01797: client denied

Jail.conf

[http-403]
enabled = true
banaction = %(banaction_allports)s
logpath = /var/log/nginx/*error*.log
          /var/log/nginx/*access*.log
maxretry = 11
findtime = 3d
backend = polling