diff --git a/_fail2ban_addon/filter.d/nginxrepeatoffender.conf b/_fail2ban_addon/filter.d/nginxrepeatoffender.conf index a790dcd68..aed3d3030 100644 --- a/_fail2ban_addon/filter.d/nginxrepeatoffender.conf +++ b/_fail2ban_addon/filter.d/nginxrepeatoffender.conf @@ -51,8 +51,8 @@ _daemon = fail2ban\.actions\s* # jail using this filter 'nginxrepeatoffender', or change this line! _jailname = nginxrepeatoffender -failregex = ^ \- \S+ \[\] \"(GET|POST|HEAD) .* \S+\" (?:403|444) .+$ -ignoreregex = +failregex = ^ \- \S+ \[.*\] \"(GET|POST|HEAD) .* \S+\" (?:403|444) .+$ +ignoreregex = ^ \- \S+ \[.*\] \"(GET|POST|HEAD) .* \S+\" ?:200 .+$ [Init]