| Current Path : /opt/cpguard/cpglfd/configs/jails.available/ |
| Current File : //opt/cpguard/cpglfd/configs/jails.available/directadmin.yaml |
jails:
- name: "directadmin-auth"
enabled: true
log_paths:
- "/var/log/directadmin/login.log" # Access Logs (Standard path)
rules:
# 1. DA App Log (Explicit Failure)
- regexp: ": '(?P<ip>\\d+\\.\\d+\\.\\d+\\.\\d+)' \\d{1,3} failed login attempt"
max_retries: 5
find_time: "1m"
ban_time: "1h"
actions:
- name: "cpgblock-directadmin"
ban_command: '/usr/bin/cpgcli ip --temp-block {{.IP}} --reason "Blocked by {{.JailName}} due to more than {{.MaxRetry}} abusive access within {{.FindTime}} seconds" --extra " LogFile: {{.LogPath}} | Reason: {{.LogLine}}"'
unban_command: "/usr/bin/cpgcli ip --temp-block {{.IP}} --remove"