diff --git a/filter.d/nginx-nosec.conf b/filter.d/nginx-nosec.conf index eabb7b4..bf381fa 100644 --- a/filter.d/nginx-nosec.conf +++ b/filter.d/nginx-nosec.conf @@ -1,5 +1,5 @@ [Definition] -failregex = ^ \S+ \- \[\] \"[A-Z]+ / \S+" 200 [0-9]+ "https://nosec.dstat.online/" .+$ +failregex = ^ \S+ \- \[\] \"[A-Z]+ / \S+" 200 [0-9]+.* ignoreregex = datepattern = {^LN-BEG}%%ExY(?P<_sep>[-/.])%%m(?P=_sep)%%d[T ]%%H:%%M:%%S(?:[.,]%%f)?(?:\s*%%z)? ^[^\[]*\[({DATE}) diff --git a/jail.d/nginx-nosec.conf b/jail.d/nginx-nosec.conf index 867c119..ba1c7ab 100644 --- a/jail.d/nginx-nosec.conf +++ b/jail.d/nginx-nosec.conf @@ -3,6 +3,6 @@ enabled = true filter = nginx-nosec port = http,https logpath = /var/log/nginx/access.log -findtime = 60 +findtime = 10 bantime = 6000 -maxretry = 2 +maxretry = 6