📘 Add example fail2ban filter & jail configuration file

Close #62
teler-sh · Mar 16, 2021 · 3545aeb · 3545aeb
1 parent c693211
commit 3545aeb
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 0 deletions.
diff --git a/teler.fail2ban-filter.example.conf b/teler.fail2ban-filter.example.conf
@@ -0,0 +1,10 @@
+# Fail2Ban filter detected threats in teler log
+
+[Definition]
+
+failregex = \[<HOST>\] \[(Common Web Attack(: .*)?|CVE|Bad (IP Address|Referrer|Crawler)|Directory Bruteforce)\] .*$
+
+# NOTES: You can ignore false-positive threats hereby or whitelist in the teler configuration file
+ignoreregex = 
+
+datepattern = {^LN-BEG}
diff --git a/teler.fail2ban-jail.example.conf b/teler.fail2ban-jail.example.conf
@@ -0,0 +1,11 @@
+[teler]
+enabled  = true
+port     = http,https
+filter   = teler
+logpath  = /path/to/teler-threats.log
+## Change as you wish
+# Ban rules
+maxretry = 10
+findtime = 60
+# Ban in seconds
+bantime  = 600