Does anyone have experience with creating the regex rule for a fail2ban filter?
-
I am trying to create a filter for AH01264 errors. This is for bots trying to run standard **"php"**s or **"pl"**s off of my home server. While I have figured out how enter and activate new filters in fail2ban, the regex required is way beyond my capabilities. So was hoping someone here has done this before and could help me out. Thank you
-
I am trying to create a filter for AH01264 errors. This is for bots trying to run standard **"php"**s or **"pl"**s off of my home server. While I have figured out how enter and activate new filters in fail2ban, the regex required is way beyond my capabilities. So was hoping someone here has done this before and could help me out. Thank you
This forum is for regex in general. So specifics to fail2ban are not likely to succeed. Googling I found other posts about this although I did not look into it deeply.
fail2ban ah01264
Based on that seems possible at least. But in general "error messages" across all applications are seldom well regulated. Thus attempts to capture them either lead to too few or too many. Until one has enough actual examples to code to. Even then updates might change that. For this forum you can post a regex and examples and we can correct the regex from that.