fail2ban: add apache-overflows

fail2ban/filter.d/apache-overflows.conf

+# Fail2Ban configuration file
+#
+# Author: Tim Connors
+#
+# $Revision$
+#
+
+[Definition]
+
+# Option:  failregex
+# Notes.:  Regexp to catch Apache overflow attempts.
+# Values:  TEXT
+#
+# Oct 23 23:10:53 site suhosin[18331]: ALERT - configured GET variable value length limit exceeded - dropped variable 'f' (attacker '91.215.78.104'
+failregex = [[]client <HOST>[]] (Invalid (method|URI) in request|request failed: URI too long|erroneous characters after protocol string)
+            ALERT - configured GET variable value length limit exceeded - dropped variable .* \(attacker '<HOST>'
+
+# Option:  ignoreregex
+# Notes.:  regex to ignore. If this regex matches, the line is ignored.
+# Values:  TEXT
+#
+ignoreregex =

fail2ban/test.d/apache-overflows

+Oct 23 23:10:53 site suhosin[18331]: ALERT - configured GET variable value length limit exceeded - dropped variable 'f' (attacker '91.215.78.104'