# Fail2Ban configuration file # # NOTE # You should set up in the jail.conf file, the maxretry and findtime carefully in order to avoid false positives. # # Author: http://www.go2linux.org # Modified by: samnicholls.net # * Mon 6 Jun 2016 - Updated failregex to capture HOST group correctly [Definition] # Option: failregex # NOTE: The failregex assumes a particular vhost LogFormat: # LogFormat "%t [%v:%p] [client %h] \"%r\" %>s %b \"%{User-Agent}i\"" # This is more in-keeping with the error log parser that contains an explicit [client xxx.xxx.xxx.xxx] # but you could obviously alter this to match your own (or the default LogFormat) failregex = \[[^]]+\] \[.*\] \[client \] "GET .* # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored. # Values: TEXT ignoreregex =