···

       
49
       
 
       
        maxretry = 5;

     

       
50
       
 
       
        findtime = "3600";

     

       
51
       
 
       
        bantime = "86400";

     

       
52
       
-
       
        action = "iptables-multiport[name=SSH, port='ssh']\nabuseipdb-agenix[abuseipdb_category='18,22']";

     

       
53
       
 
       
      };

     

       
54
       
 
       


     

       
55
       
 
       
      # Caddy HTTP/HTTPS protection - monitor for repeated 4xx/5xx errors

     
···

       
62
       
 
       
        maxretry = 10;

     

       
63
       
 
       
        findtime = "600";

     

       
64
       
 
       
        bantime = "3600";

     

       
65
       
-
       
        action = "iptables-multiport[name=Caddy, port='http,https']\nabuseipdb-agenix[abuseipdb_category='21']";

     

       
66
       
 
       
      };

     

       
67
       
 
       


     

       
68
       
 
       
      # Rate-based protection - ban on excessive requests

     
···

       
75
       
 
       
        maxretry = 50;

     

       
76
       
 
       
        findtime = "60";

     

       
77
       
 
       
        bantime = "1800";

     

       
78
       
-
       
        action = "iptables-multiport[name=Caddy-RateLimit, port='http,https']\nabuseipdb-agenix[abuseipdb_category='21']";

     

       
79
       
 
       
      };

     

       
80
       
 
       
    };

     

       
81
       
 
       
  };

     

···

       
49
       
 
       
        maxretry = 5;

     

       
50
       
 
       
        findtime = "3600";

     

       
51
       
 
       
        bantime = "86400";

     

       
52
       
+
       
        action = "iptables-multiport[name=SSH, port='ssh'] abuseipdb-agenix[abuseipdb_category='18,22']";

     

       
53
       
 
       
      };

     

       
54
       
 
       


     

       
55
       
 
       
      # Caddy HTTP/HTTPS protection - monitor for repeated 4xx/5xx errors

     
···

       
62
       
 
       
        maxretry = 10;

     

       
63
       
 
       
        findtime = "600";

     

       
64
       
 
       
        bantime = "3600";

     

       
65
       
+
       
        action = "iptables-multiport[name=Caddy, port='http,https'] abuseipdb-agenix[abuseipdb_category='21']";

     

       
66
       
 
       
      };

     

       
67
       
 
       


     

       
68
       
 
       
      # Rate-based protection - ban on excessive requests

     
···

       
75
       
 
       
        maxretry = 50;

     

       
76
       
 
       
        findtime = "60";

     

       
77
       
 
       
        bantime = "1800";

     

       
78
       
+
       
        action = "iptables-multiport[name=Caddy-RateLimit, port='http,https'] abuseipdb-agenix[abuseipdb_category='21']";

     

       
79
       
 
       
      };

     

       
80
       
 
       
    };

     

       
81
       
 
       
  };