ConfigServer Community Forum

Posted: **07 Jul 2013, 16:30**

I see the newest CSF is starting to add regex rules for nginx (modsec for now)

So how about maybe adding rules for auth_basic failures ?

I see two kinds in the log

Code: Select all

2013/04/04 15:02:03 [error] 7882#0: *161 user "sdfsdf" was not found in "/blah/.htpasswds/public_html/blah/passwd", client: .........

and

Code: Select all

2013/04/04 15:23:42 [error] 7882#0: *163 user "superuser": password mismatch, client: ...............

I guess I can try to work out the regex if I don't find it on google first but would be neat if lfd came with them built in.

Posted: **01 Aug 2013, 15:49**

This has been added to csf v6.27:
http://blog.configserver.com/?p=1889

Posted: **21 Feb 2014, 14:05**

My apologies for bringing up an older thread, but was wondering if someone may be able to guide me on how to implement this. I have tried a few ways and am not having much success.

Thanks for any help that you can provide.

ConfigServer Community Forum

detecting Nginx auth_basic login failures

detecting Nginx auth_basic login failures

Re: detecting Nginx auth_basic login failures

Re: detecting Nginx auth_basic login failures