novox/mesh-catalog
3
0
Fork 0
Code Issues Pull Requests 5 Packages Projects Releases Wiki Activity

The proxy's jail reads a refused name as well as a refused certificate

Browse Source 
The pattern ended at the line's end, which only the certificate refusal does; a request for
an unserved name carries trailing text and never matched. Caught against the live lines
before the jail counted anything (hq ADR 0179).
This commit is contained in:
jschoubben
2026-10-02 17:20:54 +02:00
parent 3c3c5c6e03
commit b547308e05
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/route-proxy/module.json
+1 -1
View File
@@ -199,7 +199,7 @@
"jails": [ "jails": [
{ {
"name": "route-proxy", "name": "route-proxy",
"failregex": "^.*(?:TLS handshake error from <HOST>:\\d+: (?:no public route for|acme/autocert: missing server name)|refused: no route for .*, asked from <HOST>:\\d+)$", "failregex": "^.*(?:TLS handshake error from <HOST>:\\d+: (?:no public route for|acme/autocert: missing server name)|refused: no route for .*, asked from <HOST>:\\d+)",
"jail": "backend = systemd\njournalmatch = CONTAINER_NAME=route-proxy\nport = http,https\nmaxretry = 10\nfindtime = 1d\nbantime = 1d" "jail": "backend = systemd\njournalmatch = CONTAINER_NAME=route-proxy\nport = http,https\nmaxretry = 10\nfindtime = 1d\nbantime = 1d"
} }
] ]