Skip to content

Instantly share code, notes, and snippets.

@digitalengineering

digitalengineering/etc_fail2ban_filter.d_magento-paypal-token-endpoint.conf

Created March 22, 2019 18:45
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save digitalengineering/896934dd526302a68c198e1b0333219b to your computer and use it in GitHub Desktop.
Save digitalengineering/896934dd526302a68c198e1b0333219b to your computer and use it in GitHub Desktop.
Download ZIP
fail2ban config to block attacks on magento payflow endpoint "/paypal/transparent/requestSecureToken"
Raw
etc_fail2ban_filter.d_magento-paypal-token-endpoint.conf
[Definition]
failregex = ^(www\.)?YOUR_DOMAIN.com:443 <HOST>.* "(GET|POST) \/paypal\/transparent\/requestSecureToken\/ HTTP\/.\..".*$
ignoreregex =
Raw
etc_fail2ban_jail.d_magento-paypal-token-endpoint.conf
[magento-paypal-token-endpoint]
enabled = true
port = http,https
filter = magento-paypal-token-endpoint
logpath = /var/log/apache2/other_vhosts_access.log
bantime = 86400
maxretry = 10
findtime = 600
@nan-ji
Copy link

nan-ji commented Mar 27, 2019

Thanks for the info

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment