Re: fail2ban for apache2

2019-11-10 Thread Tixy
On Sun, 2019-11-10 at 19:37 +, Brian wrote: > On Sun 10 Nov 2019 at 10:26:17 -0800, Kushal Kumaran wrote: > [...] > > One thing you could try is to examine the iptables rule counters > > daily/weekly. If the counters do not increase during some > > interval, > > then the rule is no longer usef

Re: fail2ban for apache2

2019-11-10 Thread Gene Heskett
On Sunday 10 November 2019 18:07:37 Gene Heskett wrote: > On Sunday 10 November 2019 16:07:22 to...@tuxteam.de wrote: > > On Sun, Nov 10, 2019 at 10:55:03AM -0500, Gene Heskett wrote: > > > On Sunday 10 November 2019 08:02:46 Michael wrote: > > > > > > Which contains such gems as this: > > > coyot

Re: fail2ban for apache2

2019-11-10 Thread Gene Heskett
On Sunday 10 November 2019 16:07:22 to...@tuxteam.de wrote: > On Sun, Nov 10, 2019 at 10:55:03AM -0500, Gene Heskett wrote: > > On Sunday 10 November 2019 08:02:46 Michael wrote: > > > > Which contains such gems as this: > > coyote.coyote.den:80 40.77.167.79 - - > > [10/Nov/2019:10:44:45 -0500] "G

Re: fail2ban for apache2

2019-11-10 Thread Gene Heskett
On Sunday 10 November 2019 14:37:58 Brian wrote: > On Sun 10 Nov 2019 at 10:26:17 -0800, Kushal Kumaran wrote: > > Brian writes: > > > On Sun 10 Nov 2019 at 11:01:07 +0100, Michael wrote: > > >> On Saturday, November 9, 2019 7:01:00 PM CET, Gene Heskett wrote: > > >> > I was able, with the help o

Re: Truth in Software: Alexandre François Garreau: Will you try my free-software before condemning it. -- Threats of being "banned from conferences"

2019-11-10 Thread deloptes
nipponm...@firemail.cc wrote: > Oh great, threats and power-plays. > > Alexandre François Garreau: Got curious who is lexandre François Garreau https://hackernoon.com/avatars/2G4JnXIXjRVO9GPsF8rTiRgmEUm1.png :D :D :D :D Brother, I don't know you, but please, relax! There are 1000s of that ki

Re: fail2ban for apache2

2019-11-10 Thread tomas
On Sun, Nov 10, 2019 at 10:55:03AM -0500, Gene Heskett wrote: > On Sunday 10 November 2019 08:02:46 Michael wrote: > Which contains such gems as this: > coyote.coyote.den:80 40.77.167.79 - - > [10/Nov/2019:10:44:45 -0500] "GET /gene/fence/18.html HTTP/1.1" 200 > 1121 "-" "Mozilla/5.0 (iPhone; CP

Re: fail2ban for apache2

2019-11-10 Thread Brian
On Sun 10 Nov 2019 at 10:26:17 -0800, Kushal Kumaran wrote: > Brian writes: > > > On Sun 10 Nov 2019 at 11:01:07 +0100, Michael wrote: > > > >> On Saturday, November 9, 2019 7:01:00 PM CET, Gene Heskett wrote: > >> > >> > I was able, with the help of another responder to carve up some iptables

Re: fail2ban for apache2

2019-11-10 Thread ghe
On 11/10/19 8:55 AM, Gene Heskett wrote: > Thats an approximate idea of my understanding how it works, but to > gradually transit from manual reading of the logs and applying iptable > rules to block the miscreants, the first step would seem to indicate > training fail2ban to read the same log

Re: fail2ban for apache2

2019-11-10 Thread Kushal Kumaran
Brian writes: > On Sun 10 Nov 2019 at 11:01:07 +0100, Michael wrote: > >> On Saturday, November 9, 2019 7:01:00 PM CET, Gene Heskett wrote: >> >> > I was able, with the help of another responder to carve up some iptables >> > rules to stop the DDOS that semrush, yandex, bingbot, and 2 or 3 other

Re: fail2ban for apache2

2019-11-10 Thread Gene Heskett
On Sunday 10 November 2019 08:02:46 Michael wrote: > On Sunday, November 10, 2019 1:39:24 PM CET, to...@tuxteam.de wrote: > > On Sun, Nov 10, 2019 at 07:04:12AM -0500, Gene Heskett wrote: > >> On Sunday 10 November 2019 06:19:51 to...@tuxteam.de wrote: > >>> On Sun, Nov 10, 2019 at 06:08:52AM -050

Re: UVC device.

2019-11-10 Thread Curt
On 2019-11-09, deloptes wrote: > > I recall I read back then that this is imposed by Apple What is "this" and what is its relation to the OP's original, erroneous ratiocination (usb = UVC, the latter being a specification to which the device in question most probably does not comply, an inference

Re: fail2ban for apache2

2019-11-10 Thread Michael
On Sunday, November 10, 2019 1:39:24 PM CET, to...@tuxteam.de wrote: On Sun, Nov 10, 2019 at 07:04:12AM -0500, Gene Heskett wrote: On Sunday 10 November 2019 06:19:51 to...@tuxteam.de wrote: On Sun, Nov 10, 2019 at 06:08:52AM -0500, Gene Heskett wrote: But... you can just configure your Apac

Re: fail2ban for apache2

2019-11-10 Thread Brian
On Sun 10 Nov 2019 at 11:01:07 +0100, Michael wrote: > On Saturday, November 9, 2019 7:01:00 PM CET, Gene Heskett wrote: > > > I was able, with the help of another responder to carve up some iptables > > rules to stop the DDOS that semrush, yandex, bingbot, and 2 or 3 others > > were bound to do

Re: UVC device.

2019-11-10 Thread Dan Ritter
deloptes wrote: > Dan Ritter wrote: > > > It's typical for standards-compliant hardware to work well on > > Linux, Windows and Mac OS without issue. When it doesn't, it's > > probably not standards-compliant. > > I recall I read back then that this is imposed by Apple - you have to do > somethin

Re: fail2ban for apache2

2019-11-10 Thread tomas
On Sun, Nov 10, 2019 at 07:04:12AM -0500, Gene Heskett wrote: > On Sunday 10 November 2019 06:19:51 to...@tuxteam.de wrote: > > > On Sun, Nov 10, 2019 at 06:08:52AM -0500, Gene Heskett wrote: [...] > > - assess client behaviour [...] > Humm. That would take a user-agent trigger [...] Bingo.

Re: fail2ban for apache2

2019-11-10 Thread Gene Heskett
On Sunday 10 November 2019 06:19:51 to...@tuxteam.de wrote: > On Sun, Nov 10, 2019 at 06:08:52AM -0500, Gene Heskett wrote: > > [...] > > > But, I'm getting the impression that it has to fail before fail2ban > > kicks in [...] > > No. It has to "succeed" once before fail2ban can do its job. It is:

Re: fail2ban for apache2

2019-11-10 Thread tomas
On Sun, Nov 10, 2019 at 06:08:52AM -0500, Gene Heskett wrote: [...] > But, I'm getting the impression that it has to fail before fail2ban kicks > in [...] No. It has to "succeed" once before fail2ban can do its job. It is: - assess client behaviour - http server writes a log entry (or a set

Re: fail2ban for apache2

2019-11-10 Thread Gene Heskett
On Sunday 10 November 2019 05:01:07 Michael wrote: > On Saturday, November 9, 2019 7:01:00 PM CET, Gene Heskett wrote: > > Whats this "jail"? The beginners tut seems to assume we've all had > > cs101 thru cs401 and Just Know all the secret handshakes bs already. > > no idea what you're talking abo

Re: fail2ban for apache2

2019-11-10 Thread Michael
On Saturday, November 9, 2019 7:01:00 PM CET, Gene Heskett wrote: Whats this "jail"? The beginners tut seems to assume we've all had cs101 thru cs401 and Just Know all the secret handshakes bs already. no idea what you're talking about... i almost never read any tutorial, just man pages. that'

Re: Thought regarding NGINX and Debian

2019-11-10 Thread tomas
On Sat, Nov 09, 2019 at 11:04:30PM +, Brian wrote: > On Sat 09 Nov 2019 at 23:15:00 +0100, to...@tuxteam.de wrote: > > [...] no brexit :) > > Can I do the Leader of the Free World, Trump, instead? :) Uh-oh. You're about to extend Godwin. Cheers -- t signature.asc Description: Digital signa