From 00cc3583ec8913d47d49bb6cf3af7f66a59766f9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sebastian=20Kr=C3=BCger?= Date: Wed, 19 Aug 2026 18:44:20 +0200 Subject: [PATCH] fix(traefik): stop fail2ban banning legit traffic on stray 4xx statuscode "400,401,403-499" counted almost every client error as a brute-force strike, so normal 404s/400s from routine app behavior could rack up 5 hits in 10 minutes and trip a 3h ban (returned as 429) for real users. Narrow to 401/403 (actual auth failures) and raise maxretry to 15 so it still catches real brute-forcing without false-positiving on noise. Co-Authored-By: Claude Sonnet 5 --- traefik/dynamic/fail2ban.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/traefik/dynamic/fail2ban.yaml b/traefik/dynamic/fail2ban.yaml index eded6b7..9d03363 100644 --- a/traefik/dynamic/fail2ban.yaml +++ b/traefik/dynamic/fail2ban.yaml @@ -10,6 +10,6 @@ http: rules: bantime: "3h" findtime: "10m" - maxretry: 5 + maxretry: 15 enabled: true - statuscode: "400,401,403-499" + statuscode: "401,403"