From 4d5e859a1247200f04c5b0da123458c909a0ea40 Mon Sep 17 00:00:00 2001 From: Howard Wilson Date: Mon, 9 Nov 2015 13:43:50 +0100 Subject: [PATCH] Add note to README.md about scoping of Fail2Ban filters --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 0472c09..61d25e2 100644 --- a/README.md +++ b/README.md @@ -143,6 +143,8 @@ Rack::Attack.blacklist('fail2ban pentesters') do |req| end ``` +Note that `Fail2Ban` filters are not automatically scoped to the blacklist, so when using multiple filters in an application the scoping must be added to the discriminator e.g. `"pentest:#{req.ip}"`. + #### Allow2Ban `Allow2Ban.filter` works the same way as the `Fail2Ban.filter` except that it *allows* requests from misbehaving clients until such time as they reach maxretry at which they are cut off as per normal.