Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
/etc/fail2ban/filter.d/apache-deepurls.conf to block "deep path" requests attacking apache2
# Fail2Ban configuration file
# 詳見: 「fail2ban: 新手老手 root 網管都要練的金鐘罩」
# http://newtoypia.blogspot.tw/2016/04/fail2ban.html
#
# Author: Chao-Kuei Hung
#
# $Revision: 1 $
#
[Definition]
# Option: failregex
# Notes.: Regexp to catch Apache overflow attempts.
# Values: TEXT
#
failregex = <HOST>.*GET\s+(/[^/\s]*){9}
#failregex = [[]client <HOST>[]]
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.
# Values: TEXT
#
ignoreregex =
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.