Eduardo Bonsi

I do have maxretry =5 [apache-noscript] port = http,https logpath = /var/log/apache2/error_log enabled = true action = pf[name=apache-noscript, port=80, protocol=tcp] abuseipdb[name=apache-noscript, port=80, protocol=tcp] maxretry = 5 bantime = 31536000 filter = apache-noscript It should ban the ip after 5 attemps but it did not! Maybe it is my misconfiguration somewhere. ON action maybe?

It is possible to stop the offending ip from running its DDoS attack by the 5th request?

What jail configuration will stop this from happen?

fail2ban Failed to restart server : ERROR NOK

Ok, no answer it could be that is difficult to implement as everything here are based on "tickets". However, tickets are more catered to "bugs" and what I am trying to do here is not necessarily a "bug" but sharing information about installations and configurations in your OS system (at least the ones that are already implemented and working). Perhaps, this is a "Label" placement issue. When I was posting this ticket, I did not see a correspondent label to assign to this topic. It could be "Installation...

Ok, no answer it could be that is difficult to implement as everything here are based on "tickets". However, tickets are more catered to "bugs" and what I am trying to do here is not necessarily a "bug" but sharing information about installations and configurations in your OS system (at least the ones that are already implemented and working). Perhaps, this is a "Label" placement issue. When I was posting this ticket, I did not see a correspondent label to assign to this topic. It could be "Installation...

Ok, no answer it could be that is difficult to implement as everything here are based on "tickets". However, tickets are more catered to "bugs" and what I am trying to do here is not necessarily a "bug" but sharing information about installations and configurations in your OS system. Perhaps this is a "Label" placement. When I was posting this ticket, I did not see a correspondent label to assign to this topic. It could be "Installation Tutorial" or "Configuration" because the information on the...

Fail2Ban Config Examples