The proxy's jail reads a refused name as well as a refused certificate (hq ADR 0179) #226

Merged

mesh-admin merged 2 commits from fix/the-proxys-jail-reads-both-refusals into main

2026-10-02 15:23:48 +00:00

Author	SHA1	Message	Date
jschoubben	23112b111c	The proxy's jail reads both refusals, each pattern naming the host once fail2ban expands <HOST> to a named group, so two in one pattern is a duplicate group name and the daemon refuses to start at all -- every jail on the machine, not just this one. Two patterns, one <HOST> each: the certificate refused for an unserved name, and the request refused for one. Caught live on the control node (hq ADR 0179).	2026-10-02 17:23:42 +02:00
jschoubben	b547308e05	The proxy's jail reads a refused name as well as a refused certificate The pattern ended at the line's end, which only the certificate refusal does; a request for an unserved name carries trailing text and never matched. Caught against the live lines before the jail counted anything (hq ADR 0179).	2026-10-02 17:20:54 +02:00

Author

SHA1

Message

Date

jschoubben

23112b111c

The proxy's jail reads both refusals, each pattern naming the host once

fail2ban expands <HOST> to a named group, so two in one pattern is a duplicate group name and
the daemon refuses to start at all -- every jail on the machine, not just this one. Two patterns,
one <HOST> each: the certificate refused for an unserved name, and the request refused for one.
Caught live on the control node (hq ADR 0179).

2026-10-02 17:23:42 +02:00

jschoubben

b547308e05

The proxy's jail reads a refused name as well as a refused certificate

The pattern ended at the line's end, which only the certificate refusal does; a request for
an unserved name carries trailing text and never matched. Caught against the live lines
before the jail counted anything (hq ADR 0179).

2026-10-02 17:20:54 +02:00