[Pound Mailing List] Pound + Fail2ban to protect backedn web servers

This is a cryptographically signed message in MIME format.

--------------ms060703040703030302060505
Content-Type: multipart/mixed;
 boundary="------------D7BDABFC10FC1C198B7094C4"
Content-Language: en-GB

This is a multi-part message in MIME format.
--------------D7BDABFC10FC1C198B7094C4
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable

Hi,

I have a dedicated HA cluster of 2 pound servers operating in the=20
following mode:

Internet=C2=A0 <---> Firewall <---> DMZ Virtual IP (2 X POUND) SRV VLAN=20
Virtual IP <---> Corporate coputers

Pound 2.7-1.el6.x86_64 is used primarily as an ssl offloader (and load=20
balancer for some redundant servers).

We don't have a WAF and would take a lot of coordination between=20
application managers to get configured and trained. The idea is: I would =

like to have the "404 not found" errors reported to Pound from the=20
backend web servers so I could setup Fail2ban on the Pound servers to=20
block those ip addresses which are scanning my backend servers.

Is this possible in pound.cfg or should I send all apache logs to a=20
syslog daemon on the Pound servers and then configure Fail2ban to "look" =

at those centralized logs ?

TIA

Fathi Ben Nasr


--------------D7BDABFC10FC1C198B7094C4
Content-Type: text/x-vcard; charset=utf-8;
 name="fbennasr.vcf"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
 filename="fbennasr.vcf"

begin:vcard
fn:Fathi Ben Nasr
n:Ben Nasr;Fathi
adr:;;;EL Menzah 6;ARIANA;2091;Tunisia
email;internet:fbennasr-BYtqQQQZdAQtGScQ88ndJ1aTQe2KTcn/@public.gmane.org
tel;cell:+216 22 59 79 45
note:sip:fbennasr-BYtqQQQZdAQtGScQ88ndJ1aTQe2KTcn/@public.gmane.org
x-mozilla-html:FALSE
version:2.1
end:vcard


--------------D7BDABFC10FC1C198B7094C4--

--------------ms060703040703030302060505
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: Signature cryptographique S/MIME
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==
--------------ms060703040703030302060505--

--
To unsubscribe send an email with subject unsubscribe to [email protected]
Please contact [email protected] for questions.