Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
45 changed files
with
710 additions
and
258 deletions.
There are no files selected for viewing
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,70 @@ | ||
| --- | ||
| name: Bug report | ||
| about: Report a bug within the fail2ban engines (not filters or jails) | ||
| title: '[BR]: ' | ||
| labels: bug | ||
| assignees: '' | ||
|
|
||
| --- | ||
|
|
||
| <!-- | ||
| - Before reporting, please make sure to search the open and closed issues for any reports in the past. | ||
| - Use this issue template to report a bug in the fail2ban engine (not in a filter or jail). | ||
| - If you want to request a feature or a new filter, please use "Feature request" or "Filter request" instead. | ||
| - If you have rather some question, please open or join to some discussion. | ||
| We will be very grateful, if your problem was described as completely as possible, | ||
| enclosing excerpts from logs (if possible within DEBUG mode, if no errors evident | ||
| within INFO mode), and configuration in particular of effected relevant settings | ||
| (e.g., with ` fail2ban-client -d | grep 'affected-jail-name' ` for a particular | ||
| jail troubleshooting). | ||
| Thank you in advance for the details, because such issues like "It does not work" | ||
| alone could not help to resolve anything! | ||
| Thanks! | ||
| (you can remove this paragraph and other comments upon reading) | ||
| --> | ||
|
|
||
| ### Environment: | ||
|
|
||
| <!-- | ||
| Fill out and check (`[x]`) the boxes which apply. If your Fail2Ban version is outdated, | ||
| and you can't verify that the issue persists in the recent release, better seek support | ||
| from the distribution you obtained Fail2Ban from | ||
| --> | ||
|
|
||
| - Fail2Ban version <!-- including any possible distribution suffixes --> : | ||
| - OS, including release name/version : | ||
| - [ ] Fail2Ban installed via OS/distribution mechanisms | ||
| - [ ] You have not applied any additional foreign patches to the codebase | ||
| - [ ] Some customizations were done to the configuration (provide details below is so) | ||
|
|
||
| ### The issue: | ||
|
|
||
| <!-- summary here --> | ||
|
|
||
| #### Steps to reproduce | ||
|
|
||
| #### Expected behavior | ||
|
|
||
| #### Observed behavior | ||
|
|
||
| #### Any additional information | ||
|
|
||
|
|
||
| ### Configuration, dump and another helpful excerpts | ||
|
|
||
| #### Any customizations done to /etc/fail2ban/ configuration | ||
| <!-- put your configuration excerpts between next 2 lines --> | ||
| ``` | ||
| ``` | ||
|
|
||
| #### Relevant parts of /var/log/fail2ban.log file: | ||
| <!-- preferably obtained while running fail2ban with `loglevel = 4` --> | ||
| <!-- put your log excerpt between next 2 lines --> | ||
| ``` | ||
| ``` | ||
|
|
||
| #### Relevant lines from monitored log files: | ||
| <!-- put your log excerpt between next 2 lines --> | ||
| ``` | ||
| ``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,35 @@ | ||
| --- | ||
| name: Feature request | ||
| about: Suggest an idea or an enhancement for this project | ||
| title: '[RFE]: ' | ||
| labels: enhancement | ||
| assignees: '' | ||
|
|
||
| --- | ||
|
|
||
| <!-- | ||
| - Before requesting, please make sure to search the open and closed issues for any requests in the past. | ||
| - Use this issue template to request a feature in the fail2ban engine (not a new filter or jail). | ||
| - If you want to request a new filter or failregex, please use "Filter request" instead. | ||
| - If you have rather some question, please open or join to some discussion. | ||
| --> | ||
|
|
||
| #### Feature request type | ||
| <!-- | ||
| Please provide a summary description of the feature request. | ||
| --> | ||
|
|
||
| #### Description | ||
| <!-- | ||
| Please describe the feature in more detail. | ||
| --> | ||
|
|
||
| #### Considered alternatives | ||
| <!-- | ||
| A clear and concise description of any alternative solutions or features you've considered. | ||
| --> | ||
|
|
||
| #### Any additional information | ||
| <!-- | ||
| Add any other context or screenshots about the feature request here. | ||
| --> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,59 @@ | ||
| --- | ||
| name: Filter request | ||
| about: Request a new jail or filter to be supported or existing filter extended with new failregex | ||
| title: '[FR]: ' | ||
| labels: filter-request | ||
| assignees: '' | ||
|
|
||
| --- | ||
|
|
||
| <!-- | ||
| - Before requesting, please make sure to search the open and closed issues for any requests in the past. | ||
| - Sometimes failregex have been already requested before but are not implemented yet due to various reasons. | ||
| - If there are no hits for your concerns, please proceed otherwise add a comment to the related issue (also if it is closed). | ||
| - If you want to request a new feature, please use "Feature request" instead. | ||
| - If you have rather some question, please open or join to some discussion. | ||
| --> | ||
|
|
||
| ### Environment: | ||
|
|
||
| <!-- | ||
| Fill out and check (`[x]`) the boxes which apply. | ||
| --> | ||
|
|
||
| - Fail2Ban version <!-- including any possible distribution suffixes --> : | ||
| - OS, including release name/version : | ||
|
|
||
| #### Service, project or product which log or journal should be monitored | ||
|
|
||
| - Name of filter or jail in Fail2Ban (if already exists) : | ||
| - Service, project or product name, including release name/version : | ||
| - Repository or URL (if known) : | ||
| - Service type : | ||
| - Ports and protocols the service is listening : | ||
|
|
||
| #### Log or journal information | ||
| <!-- Delete unrelated group --> | ||
|
|
||
| <!-- Log file --> | ||
|
|
||
| - Log file name(s) : | ||
|
|
||
| <!-- Systemd journal --> | ||
|
|
||
| - Journal identifier or unit name : | ||
|
|
||
| #### Any additional information | ||
|
|
||
|
|
||
| ### Relevant lines from monitored log files: | ||
|
|
||
| #### failures in sense of fail2ban filter (fail2ban must match): | ||
| <!-- put your log excerpt between next 2 lines --> | ||
| ``` | ||
| ``` | ||
|
|
||
| #### legitimate messages (fail2ban should not consider as failures): | ||
| <!-- put your log excerpt between next 2 lines --> | ||
| ``` | ||
| ``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,14 @@ | ||
| # Fail2Ban filter to match bad requests to nginx | ||
| # | ||
|
|
||
| [Definition] | ||
|
|
||
| # The request often doesn't contain a method, only some encoded garbage | ||
| # This will also match requests that are entirely empty | ||
| failregex = ^<HOST> - \S+ \[\] "[^"]*" 400 | ||
|
|
||
| datepattern = {^LN-BEG}%%ExY(?P<_sep>[-/.])%%m(?P=_sep)%%d[T ]%%H:%%M:%%S(?:[.,]%%f)?(?:\s*%%z)? | ||
| ^[^\[]*\[({DATE}) | ||
| {^LN-BEG} | ||
|
|
||
| # Author: Jan Przybylak |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.