about summary refs log tree commit diff stats
path: root/tools/fail2ban.html
diff options
context:
space:
mode:
Diffstat (limited to 'tools/fail2ban.html')
-rw-r--r--tools/fail2ban.html37
1 files changed, 37 insertions, 0 deletions
diff --git a/tools/fail2ban.html b/tools/fail2ban.html
new file mode 100644
index 0000000..9fad021
--- /dev/null
+++ b/tools/fail2ban.html
@@ -0,0 +1,37 @@
+<!DOCTYPEhtml>
+<htmldir="ltr" lang="en">
+   <head>
+       <meta charset='utf-8'>
+       <title>1. Fail2ban</title>
+   </head>
+   <body>
+       <h1>1. Fail2ban</h1>
+
+       <pre>
+       $ prt-get depinst fail2ban
+       </pre>
+
+       <h2 id="conf">1. Configure</h2>
+
+       <p>To start fail2ban at next boot edit /etc/rc.conf and add fail2ban.
+       Fail2ban will verify if /etc/fail2ban/jail.local exist, if exist will
+       use it. Copy distribution jail.conf to jail.locol;</p>
+
+       <pre>
+       $ sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
+       </pre>
+
+       <p>Edit /etc/fail2ban/jail.local, example configuration;</p>
+
+       <pre>
+       [ssh-iptables]
+
+       enabled  = enable
+       filter   = sshd
+       action   = iptables[name=SSH, port=ssh, protocol=tcp]
+                  sendmail-whois[name=SSH, dest=admin@box, sender=fail2ban@box, sendername="fail2ban"]
+                  logpath  = /var/log/auth
+                  maxretry = 5
+       </pre>
+   </body>
+</html>