feat(security): fail2ban для HAProxy JSON reject и Zabbix 403.

2026-06-15 15:03:30 +10:00
parent 2ce71df1f8
commit cd14f0a1c4
8 changed files with 115 additions and 0 deletions
@@ -0,0 +1,6 @@
+[Definition]
+
+# Сканеры и reject на fe_https_sni (неизвестный SNI, allowlist, мусор)
+failregex = ^.*haproxy\[(?:\d+|master)\]: \{"time":"[^"]*","client":"<HOST>".*"fe":"fe_https_sni","be":"fe_https_sni","srv":"<NOSRV>"
+
+ignoreregex =