Add new comment

I landed on your website while searching for instructions on how to properly configure limit_req_zone; I have it enabled on my own server, but apparently, it was being too permissive, and I needed to understand how to tweak it to stop those bots, crawlers, and fake login attempts/fake REST calls to grab so many resources (without banning them!).

To my delight, you not only explain that thoroughly, but you add, as a bonus, full integration with fail2ban! Ironically, I have fail2ban activated, and I even had the skeleton of a filter to look through the logs in a way very similar to yours, but... that filter wasn't even active and needed some hard kicking to do its job properly...

Thanks to this article, now I understand why fail2ban was not really doing much about those excessive requests. Every day I had to log in manually and (temporarily) ban all abusive requests. Obviously, I wouldn't catch them all — that's why we have cool things such as fail2ban. But it's important to understand how these tools actually work together to do its magic.

Again, my heartfelt thanks for pointing me in the right direction! I've learned quite a lot today, just from reading this...

Restricted HTML

  • Allowed HTML tags: <a href hreflang> <em> <strong> <cite> <blockquote cite> <code> <ul type> <ol start type> <li> <dl> <dt> <dd> <h2 id> <h3 id> <h4 id> <h5 id> <h6 id>
  • Lines and paragraphs break automatically.