Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Sun Aug 15, 2010 11:53 am 
Offline

Joined: Sun Aug 15, 2010 11:39 am
Posts: 1
Location: Escondido, CA
Hi,
I got my first Linode about a month ago, and everything is great, but I have a question:

I'm running Ubuntu 10.04, and in the apache log /var/log/apache2/error.log.1 are many "File does not exist" statements, most of them are for PHPMyAdmin or some CMS, none of which I have.

Should I be blocking these or what?

I tried putting the code below into my Fail2ban jail.conf, but in the fail2ban log it shows its an invalid command:
Code:
failregex = [[]client (?P<host>\S*)[]] File does not exist: .*\.php

but I wasnt sure where to put it so I put it here
Code:

[apache-noscript]

enabled = true
port    = http,https
filter  = apache-noscript
logpath = /var/log/apache*/*error.log
failregex = [[]client (?P<host>\S*)[]] File does not exist: .*\.php
maxretry = 6



I'm sure I'm not the only one getting these errors, but I couldn't find a thread about what any body else is doing with these errors.


Top
   
 Post subject:
PostPosted: Tue Sep 07, 2010 11:57 am 
Offline
Senior Newbie

Joined: Thu Dec 17, 2009 2:26 pm
Posts: 10
You shouldn't be modifying jail.conf. Use jail.local to override the settings in jail.conf.

Further, the failregex condition doesn't belong in the configuration file it belongs in the filter. From the example you've provided that would be /etc/fail2ban/filter.d/apache-noscript.

Look into fail2ban-regex to test your regex condition.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group