Security fail2ban for Centmin Mod + CSF Firewall / Cloudflare API

Do i need a better cleanup or it needs another fix?

I just delete the /root/tools/centminmod-fail2ban folder and then i reinstall and i got:

and

---

 

That one did the trick

I got only:

But it works Don't know if you want to do anything related to the above message ....

Thank you !

 

Is that the wrong syntax to remove an ip?

Code:

fail2ban-client set nginx-conn-limit unban 123.456.789.000

the result is:

But using this it works great:

Just wondering

 

At jail.local i can see that:

but on that path we have always access.log and error.log only.

So there is no reason to use the * in front or at the back of "error" name...

For me it will be better to use:

Code:

logpath = /usr/local/nginx/logs/access.log
          /usr/local/nginx/logs/error.log

or just keep the direct link to error.log only if you want to check only this file...

Can you please verify George and add that as default ?

Thank you !

 

The above are correct but only for the path:

But I am talking for the path:

If you check any of your servers you will see that there are only:

So we can point to them directly without any *

 

That's a nice fix but i think is better to do this:

Code:

logpath = /home/nginx/domains/*/log/access.log
               /usr/local/nginx/logs/*access*.log
               /var/log/nginx/*.access.log

change to:

Code:

logpath = /home/nginx/domains/*/log/access.log
               /home/nginx/domains/*/log/error.log
               /usr/local/nginx/logs/access.log
               /usr/local/nginx/logs/error.log
              /var/log/nginx/*.access.log
             /var/log/nginx/*.error.log

Don't know if all entries needed but i think that's better format to use.....

What do you think?

 

Ok then only that one can be a direct link:

Code:

/usr/local/nginx/logs/access.log

As at that folder there will be always only the access.log and error.log and nothing related....

and use the * at /var/log/nginx/ as needed there.... ?

It's not an issue if you want to leave it as *access*.log as it will work but i think is not needed

No problem do what you think is better

 

No update function so i have to do the edits myself?

 

Ok two more fixes please

Code:

 action = csfdeny[name=nginx-common]
 #action   = cloudflare
 logpath = /home/nginx/domains/*/log/access.log
                /usr/local/nginx/logs/access.log
               /var/log/nginx/*.access.log
              /var/log/nginx/localhost_ssl.access.log

and

That line is not needed on the above:

as it is covered by the:

Code:

/var/log/nginx/*.access.log

Thank you