I'd like to see the addition of the opposite of a
which we might call an "ignoreregex". This new regex would
specify log lines to ignore, even though they may match
For example, fail2ban might monitor Apache logs to identify
sites trying to hack the server with unusual URL
simple way to do this would be to block a site after
404s. However, some 404 errors are innocuous, such as
for a non-existent "/robots.txt" or "/favicon.ico". These
harmless 404s could be removed from the failures count by
using ignoreregex to match them.
I have fail2ban 0.5.2.
Log in to post a comment.