From 0a9359728af61de34ab6948ee994414c5dac9443 Mon Sep 17 00:00:00 2001 From: FusionPBX Date: Thu, 11 Oct 2018 12:25:37 -0600 Subject: [PATCH] Update jail.local --- debian/resources/fail2ban/jail.local | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/debian/resources/fail2ban/jail.local b/debian/resources/fail2ban/jail.local index dfe42b0..09aaf32 100755 --- a/debian/resources/fail2ban/jail.local +++ b/debian/resources/fail2ban/jail.local @@ -119,8 +119,8 @@ maxretry = 120 [nginx-dos] # Based on apache-badbots but a simple IP check (any IP requesting more than -# 240 pages in 60 seconds, or 4p/s average, is suspicious) -enabled = false +# 300 pages in 60 seconds, or 5p/s average, is suspicious) +enabled = true port = 80,443 protocol = tcp filter = nginx-dos @@ -128,4 +128,4 @@ logpath = /var/log/nginx/access*.log action = iptables-allports[name=nginx-dos, protocol=all] findtime = 60 bantime = 86400 -maxretry = 240 +maxretry = 300