From de01fa642310ad1ee923bbfb8457cbc1920465d5 Mon Sep 17 00:00:00 2001 From: eiqnepm <86803173+eiqnepm@users.noreply.github.com> Date: Thu, 19 Sep 2024 22:22:24 +0000 Subject: [PATCH 1/3] Fix Home Assistant filtering --- filter.d/homeassistant-auth.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/filter.d/homeassistant-auth.conf b/filter.d/homeassistant-auth.conf index a7a124c..1d3954b 100644 --- a/filter.d/homeassistant-auth.conf +++ b/filter.d/homeassistant-auth.conf @@ -6,7 +6,7 @@ before = common.conf [Definition] -failregex = ^%(__prefix_line)s.*\[homeassistant.components.http.ban\] Login attempt or request with invalid authentication from .*$ +failregex = ^%(__prefix_line)s.*\[homeassistant.components.http.ban\] Login attempt or request with invalid authentication from.*\(\).*$ ignoreregex = From 0271a68687e6999d4e78e52b5b95d12f89c067d3 Mon Sep 17 00:00:00 2001 From: eiqnepm <86803173+eiqnepm@users.noreply.github.com> Date: Fri, 20 Sep 2024 03:49:05 +0000 Subject: [PATCH 2/3] qBittorrent config --- filter.d/qbittorrent-auth.conf | 13 +++++++++++++ jail.d/qbittorrent-auth.conf | 8 ++++++++ 2 files changed, 21 insertions(+) create mode 100644 filter.d/qbittorrent-auth.conf create mode 100644 jail.d/qbittorrent-auth.conf diff --git a/filter.d/qbittorrent-auth.conf b/filter.d/qbittorrent-auth.conf new file mode 100644 index 0000000..7042bbc --- /dev/null +++ b/filter.d/qbittorrent-auth.conf @@ -0,0 +1,13 @@ +## Version 2024/09/20 +# Fail2Ban filter configuration for qBittorrent + +[INCLUDES] +before = common.conf + +[Definition] + +failregex = ^.*WebAPI login failure\. Reason: invalid credentials.*IP: .*$ + +ignoreregex = + +datepattern = %%Y-%%m-%%dT%%H:%%M:%%S diff --git a/jail.d/qbittorrent-auth.conf b/jail.d/qbittorrent-auth.conf new file mode 100644 index 0000000..370512c --- /dev/null +++ b/jail.d/qbittorrent-auth.conf @@ -0,0 +1,8 @@ +## Version 2024/09/20 +# Fail2Ban jail configuration for qBittorrent + +[qbittorrent-auth] + +enabled = false +port = 8080 +logpath = %(remote_logs_path)s/qbittorrent/qbittorrent.log From c10c8169572fd06ca66b343f45a77f07bb8f5785 Mon Sep 17 00:00:00 2001 From: eiqnepm <86803173+eiqnepm@users.noreply.github.com> Date: Fri, 20 Sep 2024 04:50:16 +0100 Subject: [PATCH 3/3] Update homeassistant-auth.conf --- filter.d/homeassistant-auth.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/filter.d/homeassistant-auth.conf b/filter.d/homeassistant-auth.conf index 1d3954b..a7a124c 100644 --- a/filter.d/homeassistant-auth.conf +++ b/filter.d/homeassistant-auth.conf @@ -6,7 +6,7 @@ before = common.conf [Definition] -failregex = ^%(__prefix_line)s.*\[homeassistant.components.http.ban\] Login attempt or request with invalid authentication from.*\(\).*$ +failregex = ^%(__prefix_line)s.*\[homeassistant.components.http.ban\] Login attempt or request with invalid authentication from .*$ ignoreregex =