diff options
author | Silvino Silva <silvino@bk.ru> | 2016-09-15 00:47:34 +0100 |
---|---|---|
committer | Silvino Silva <silvino@bk.ru> | 2016-09-15 00:47:34 +0100 |
commit | 07bedee34d9ded6f86904c7e4b4e02464ff8cb14 (patch) | |
tree | 242dcbfdcd97667017bdfcaaa535919b01168fe1 /tools/fail2ban.html | |
parent | b9762bb44befe4a852688eb19cce1aec3462f2ca (diff) | |
download | doc-07bedee34d9ded6f86904c7e4b4e02464ff8cb14.tar.gz |
added tools
Diffstat (limited to 'tools/fail2ban.html')
-rw-r--r-- | tools/fail2ban.html | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/tools/fail2ban.html b/tools/fail2ban.html new file mode 100644 index 0000000..9fad021 --- /dev/null +++ b/tools/fail2ban.html @@ -0,0 +1,37 @@ +<!DOCTYPEhtml> +<htmldir="ltr" lang="en"> + <head> + <meta charset='utf-8'> + <title>1. Fail2ban</title> + </head> + <body> + <h1>1. Fail2ban</h1> + + <pre> + $ prt-get depinst fail2ban + </pre> + + <h2 id="conf">1. Configure</h2> + + <p>To start fail2ban at next boot edit /etc/rc.conf and add fail2ban. + Fail2ban will verify if /etc/fail2ban/jail.local exist, if exist will + use it. Copy distribution jail.conf to jail.locol;</p> + + <pre> + $ sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local + </pre> + + <p>Edit /etc/fail2ban/jail.local, example configuration;</p> + + <pre> + [ssh-iptables] + + enabled = enable + filter = sshd + action = iptables[name=SSH, port=ssh, protocol=tcp] + sendmail-whois[name=SSH, dest=admin@box, sender=fail2ban@box, sendername="fail2ban"] + logpath = /var/log/auth + maxretry = 5 + </pre> + </body> +</html> |