Working Fail2ban WebAuth Config

Nov 27, 2020
13
4
8
49
There you go, there is a github repo but he forgot one line in the jail config

filter.d/pbs-web-aut.conf
----------
[INCLUDES]

before = common.conf

[Definition]

__suffix_failed_login = (AUTH_ERR|invalid credentials|user account disabled or expired).?

failregex = authentication failure; rhost=\[<HOST>\]:\d+ user=.* msg=%(__suffix_failed_login)s

ignoreregex =
----------------

jail.d/pbs-web-aut.conf

------------------
[pbs-web-aut]
enabled = true
port = https,http,8007
filter = pbs-web-aut
logpath = /var/log/proxmox-backup/api/auth.log
maxretry = 2
bantime = 3600
-------------------