diff --git a/fail2ban/data/filter.d/nginx-modsec.conf b/fail2ban/data/filter.d/nginx-modsec.conf index 95557b2..bbe7452 100644 --- a/fail2ban/data/filter.d/nginx-modsec.conf +++ b/fail2ban/data/filter.d/nginx-modsec.conf @@ -1,4 +1,4 @@ [Definition] -failregex = ^.*"remote_addr":"".*"block_request":"true".*$ +failregex = ^.*"remote_addr":"".*"block_request":"1".*$ ^.*"remote_addr":"".*"status":403.*$ -ignoreregex = + ^.*"remote_addr":"".*"status":404.*$