Re: [Fail2ban-users] regexp on debian etch

[Cyril J. <cyr...@fa...>]

Hi Mike,

> Noreply meaning it can't be done - sigh ;)
> 

Sure it can be done. No reply meaning I forgot to... reply ;)

The problem with "File does not exist" is that you will probably ban 
legitimate users too. Let's see an example: most browsers ask for 
favicon.ico which does not always exist. So really think about the 
consequences. If you really want to ban host that triggered a "file does 
not exist", I suggest you list the most common accessed URL. Should look 
like:

failregex = [[]client <HOST>[]] File does not exist: 
/var/www/html/(forums|chat3|phpmyadmin)\s*$

Regards,

Cyril Jaquier