Files
homelabscripts/fail2ban/filter.d/authelia-auth.conf
2024-03-21 15:00:05 -04:00

14 lines
378 B
Plaintext

[INCLUDES]
before = common.conf
[Definition]
failregex = ^.*Unsuccessful (1FA|TOTP|Duo|U2F) authentication attempt by user .*remote_ip="?<HOST>"? stack.*
(?i)^.*access to .*is not authorized.*remote_ip=<HOST>
^.* is banned until .*remote_ip=<HOST> stack.*
ignoreregex = ^.*level=debug.*
^.*level=info.*
^.*level=warning.*