about summary refs log tree commit diff stats
path: root/linux/fail2ban.html
diff options
context:
space:
mode:
Diffstat (limited to 'linux/fail2ban.html')
-rw-r--r--linux/fail2ban.html54
1 files changed, 54 insertions, 0 deletions
diff --git a/linux/fail2ban.html b/linux/fail2ban.html
new file mode 100644
index 0000000..71bbdf9
--- /dev/null
+++ b/linux/fail2ban.html
@@ -0,0 +1,54 @@
+<!DOCTYPEhtml>
+<htmldir="ltr" lang="en">
+   <head>
+       <meta charset='utf-8'>
+       <title>Fail2ban</title>
+   </head>
+   <body>
+
+       <a href="index.html">Tools Index</a>
+
+       <h1>Fail2ban</h1>
+
+       <pre>
+       $ prt-get depinst fail2ban
+       </pre>
+
+       <h2 id="conf">1. Configure</h2>
+
+       <p>To start fail2ban at next boot edit /etc/rc.conf and add fail2ban.
+       Fail2ban will verify if /etc/fail2ban/jail.local exist, if exist will
+       use it. Copy distribution jail.conf to jail.locol;</p>
+
+       <pre>
+       $ sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
+       </pre>
+
+       <p>Edit /etc/fail2ban/jail.local, example configuration;</p>
+
+       <pre>
+       [ssh-iptables]
+
+       enabled  = enable
+       filter   = sshd
+       action   = iptables[name=SSH, port=ssh, protocol=tcp]
+                  sendmail-whois[name=SSH, dest=admin@box, sender=fail2ban@box, sendername="fail2ban"]
+                  logpath  = /var/log/auth
+                  maxretry = 5
+       </pre>
+
+       <p>Test a filter</p>
+
+        <pre>
+        # fail2ban-regex /var/log/iptables iptables-ssh.conf
+        </pre>
+
+        <a href="index.html">Tools Index</a>
+
+        <p>
+        This is part of the LeetIO System Documentation.
+        Copyright (C) 2021
+        LeetIO Team.
+        See the file <a href="../fdl-1.3-standalone.html">Gnu Free Documentation License</a> for copying conditions.</p>
+    </body>
+</html>