Have you considered doing port knocking for your users? They point web browser to a location, it registers the request, that ip is given a pass for fail2ban or iptables. A simple listening script would suffice, either implementing an “Unban” if locked out or possibly some genius with iptables could skip the whole thing and code it in a one liner :)
> On 18 Aug 2022, at 10:33, Denis <[email protected]> wrote: > > Hello. > > Unfortunately users has dynamic IPs and there are a lot of users. I can't > manually add every one. > > On 16.08.2022 23:39, Roman Pikalo wrote: >> One of options would be to use "ignoreip" in your jail configuration to >> ignore certain IP-s or even subnets. Of course that means that have that IP >> list. >> >> ----- >> Roman >> >> >> On Mon, Aug 15, 2022 at 11:04 AM Denis <[email protected] <mailto:[email protected]>> >> wrote: >> Hello. >> >> I configured f2b for strict enough policy. >> >> Some normal users can banned with false positive. >> >> Is it possible to skip banning if user has good requests for findtime? >> (not lines with ignoreregex but add IP's reputation) >> >> Or decrease IP's bad count if it get good req? (goodregex?) >> >> >> >> >> >> _______________________________________________ >> Fail2ban-users mailing list >> [email protected] >> <mailto:[email protected]> >> https://lists.sourceforge.net/lists/listinfo/fail2ban-users >> <https://lists.sourceforge.net/lists/listinfo/fail2ban-users> >> >> >> <https://www.linkedin.com/company/funderbeam> >> <https://twitter.com/funderbeam> >> <https://www.facebook.com/Funderbeam> >> <https://www.youtube.com/channel/UCzJk98eNyBTBr0CsT_YTlcg?sub_confirmation=1> >> >> The Global Funding and Trading Platform of private companies. >> >> Copenhagen London Singapore Tallinn Zagreb >> >> www.funderbeam.com >> <https://www.funderbeam.com/>_______________________________________________ > Fail2ban-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/fail2ban-users
_______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
