Nextcloud-client is banned by Fail2ban (AH01797)

Support
,
1

AH01797: client denied by server configuration: /usr/share/nextcloud/config

No solution right now, I saw some clients version =< to 2.6.4 (Linux and windows) creating some logs traces in /var/log/httpd/error_log.

It seems like the client trie to reach sub.domain.org/config which is forbidden by the .htaccess, of course fail2ban does it job and ban the IP

2

the problem is relative to the client…something weird, for now since it is relative to nextcloud url and not relative to the authentication I turned around the issue by a apache-auth.local, restart the fail2ban service after

[root@prometheus ~]# cat  /etc/fail2ban/filter.d/apache-auth.local 
# Fail2Ban apache-auth filter


[Definition]
#
ignoreregex = /usr/share/nextcloud/config$
3

Related?

1 Like
4

yes I came across on this bug report too

5

confirmed in access_log

xxx.xxx.xxx.xxx - - [09/Mar/2020:20:37:20 +0100] "GET /ocs/v1.php/config?format=json HTTP/1.1" 200 206 "-" "Mozilla/5.0 (Linux) mirall
/2.6.4git (Nextcloud)"

xx.xxx.xxx.xxx - - [09/Mar/2020:20:37:51 +0100] "GET /ocs/v1.php/config?format=json HTTP/1.1" 200 206 "-" "Mozilla/5.0 (Linux) mirall
/2.6.4git (Nextcloud)"