Hi, As many of us are aware, fail2ban is a highly effective method for blocking brute-force attempts by temporarily (or permanently, if desired!) blocking IP addresses. Is there a similar functionality, and/or a native definition for the fail2ban jail.local file? There are a few unofficial ones out…

As far as I know, the nextcloud brute force protection leads to a growing delay between failing login attempts. Fail2ban on the other hand completely blocks a certain ip, if it fails given times for a given duration. But fail2ban is configurable in allowed attempts and block duration. So theoretical…

doubles ? yes. nevertheless: for security reasons and from my perspective [image] MichaIng: Fail2ban on the other hand completely blocks a certain ip https://www.c-rieger.de/nextcloud-installation-guide/#c103 it is higly recommended! With an effort less than 5 minutes your system is more s…

Fail2ban blocks the untrusted IP at the interface level using a smart firewall. Once blocked via fail2ban, the untrusted IP never accesses your HTTP server, whereas the throttling built-in to NC is done at the PHP level, and thus, allows the untrusted user to access server resources, such as Apache,…

:+1: and you won’t mention any performance impact

as alternative I am using DenyHosts… basically same

Currently using Nextcloud 18. I have tried the suggestions on this site, went to a regex creator on a website and manually typed the regex filter creator/tester website character by character to cover the output syntax, followed the formatting of start filter and end filter displayed. I cannot the f…

The regex for fail2ban changes on basically every major update. I would check out nextcloudpi and see what they use in their regex.

I use a more generic regex which works fine for Nextcloud 12 through 18: [Definition] # regex for Nextcloud 12 - 18: failregex = ^.*Login failed: '?.*'? $Remote IP: '?<HOST>'?$.*$ I am quite confident that this will serve my needs also with future releases of Nextcloud.

[image] Bernie_O: '?<HOST>' Exactly this will not work always anymore, please see discussion under: [image] Nextcloud 17 and Fail2ban: Please check your regular expression 🏷️ General That was also discussion here: and here: I try to push similar solution, bu…

[image] gas85: '?<HOST>'? Exactly this will not work always anymore Oh, could you elaborate in which cases this will not work always anymore? I checked your link and could not find a reason. It works with my installation (18.0.3) and I don‘t understand why it shouldn’t work with other instal…

Fail2ban Native Support

ℹ️ Support

gas85 April 1, 2020, 8:49am 27

Exactly this will not work always anymore, please see discussion under:

also in provided GIST.