Add note to README.md about scoping of Fail2Ban filters

This commit is contained in:
Howard Wilson 2015-11-09 13:43:50 +01:00
parent ad1cb68daf
commit 4d5e859a12

View file

@ -143,6 +143,8 @@ Rack::Attack.blacklist('fail2ban pentesters') do |req|
end end
``` ```
Note that `Fail2Ban` filters are not automatically scoped to the blacklist, so when using multiple filters in an application the scoping must be added to the discriminator e.g. `"pentest:#{req.ip}"`.
#### Allow2Ban #### Allow2Ban
`Allow2Ban.filter` works the same way as the `Fail2Ban.filter` except that it *allows* requests from misbehaving `Allow2Ban.filter` works the same way as the `Fail2Ban.filter` except that it *allows* requests from misbehaving
clients until such time as they reach maxretry at which they are cut off as per normal. clients until such time as they reach maxretry at which they are cut off as per normal.