Sebastian Göls Abrynos

Abrynos / postfixadmin.conf

Created May 30, 2022 21:37

fail2ban filter to catch authentication failures with postfixadmin via nginx logs

	[Definition]

	failregex = ^.PostfixAdmin (admin\|user) login failed .ip_address: <HOST>.*$
	(?i)^<HOST> -.] \"(GET\|POST\|PUT\|DELETE\|HEAD) (/.)?/\.git/

Abrynos / nginx-403.conf

Created May 30, 2022 21:36

nginx filter for too many forbidden responses - use with care

	[Definition]
	failregex = ^<HOST> -."(GET\|POST\|PUT\|DELETE\|HEAD).HTTP.*" 403
	ignoreregex =

Abrynos / nginx-401.conf

Created May 30, 2022 21:32

fail2ban config for banning on too many authentication failures

	[Definition]
	failregex = ^<HOST> -."(GET\|POST\|PUT\|DELETE\|HEAD).HTTP.*" 401
	ignoreregex =

Abrynos / nginx-extras.conf

Last active November 27, 2022 21:09

A fail2ban filter for script kiddies trying to fuck with nginx