Merge pull request #5760 from pulibrary/15_facets

[fail2ban] Reject requests with 15 facets, rather than 20
pulibrary · Jan 17, 2025 · 4a5c203 · 4a5c203
2 parents 6bdc328 + e1f278d
commit 4a5c203
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/roles/nginxplus/files/fail2ban/nginx-bad-httpbots.conf b/roles/nginxplus/files/fail2ban/nginx-bad-httpbots.conf
@@ -3,6 +3,6 @@ enabled = true
 port    = http,https
 filter  = nginx-f_inclusive
 logpath = /var/log/nginx/access.log
-maxretry = 3
+maxretry = 10
 findtime = 3600
 bantime  = 3600
diff --git a/roles/nginxplus/files/fail2ban/nginx-f_inclusive.conf b/roles/nginxplus/files/fail2ban/nginx-f_inclusive.conf
@@ -1,3 +1,3 @@
 [Definition]
-failregex = ^\{\"remote_ip\"\: \"<ADDR>\".{45,80}\"uri\"\:.{4,}?(?:\&?f(?:_inclusive)?%%5B.{5,}?){20,}
+failregex = ^\{\"remote_ip\"\: \"<ADDR>\".{45,80}\"uri\"\:.{4,}?(?:\&?f(?:_inclusive)?%%5B.{5,}?){15,}
 ignoreregex =