Sergey G. Brester
Sergey G. Brester
Please stop... producing one new PR for few lines of docu per file is not practical and does not help. Additionally I'm still not sure that each F2B config does...
Still not convinced it should be really part of filter description (even described in filter self)... anyway I have rebased and squashed all your changes in this PR (I'll close...
> I'm a contributor at www.fail2ban.org I already have editing access. ... I could simply add it there. This looks like really good suggestion. Note also our [wiki](https://github.com/fail2ban/fail2ban/wiki) here is...
small remark for me for #716: - before increasing a ban time, observer can check ip is bad within configured blacklist's, to increase a time more aggressive up to permanent.
Well, I'm not sure whether the 407 authentication denial would be a failure (in sense of banning them) For example below you'll find a quote from http://wiki.squid-cache.org/Features/Authentication: > **If the...
I think, I can pretty much distinguish between first connect (without username) and second one (with user name): ``` 1480383026.584 8049 xxx.xxx.xxx.xxx TCP_TUNNEL/200 4503 CONNECT www.google-analytics.com:443 user HIER_DIRECT/172.217.4.142 - 1480383026.969...
> It would be wrong to ignore when user is - because then I can literally write up a script that will DOS my Squid by not putting a user...
The same conclusion as https://github.com/fail2ban/fail2ban/issues/1589#issuecomment-258823347
> It would be great if you could reconsider this defect. Please provide the excerpt from access-log with this format. > Not only does the filter not work, it fails...
> The filters mentioned in this ticket. I asked for an exact filter list and an excerpt from access-log with messages that need to match. Please provide this info. Neither...