Merge pull request #149 from watsonbox/readme-scoping-fail2ban

Add note to README.md about scoping of Fail2Ban filters
This commit is contained in:
Aaron Suggs 2015-12-18 09:00:03 -05:00
commit 2b75edacfd

View file

@ -147,6 +147,8 @@ Rack::Attack.blacklist('fail2ban pentesters') do |req|
end end
``` ```
Note that `Fail2Ban` filters are not automatically scoped to the blacklist, so when using multiple filters in an application the scoping must be added to the discriminator e.g. `"pentest:#{req.ip}"`.
#### Allow2Ban #### Allow2Ban
`Allow2Ban.filter` works the same way as the `Fail2Ban.filter` except that it *allows* requests from misbehaving `Allow2Ban.filter` works the same way as the `Fail2Ban.filter` except that it *allows* requests from misbehaving
clients until such time as they reach maxretry at which they are cut off as per normal. clients until such time as they reach maxretry at which they are cut off as per normal.