Fail2ban - Revision history

Sertonix: replace /etc/init.d with rc-service

2023-11-17T09:51:27Z

replace /etc/init.d with rc-service

← Older revision		Revision as of 09:51, 17 November 2023
Line 7:		Line 7:
	{{cmd \|rc-update add fail2ban}}		{{cmd \|rc-update add fail2ban}}
	Start the fail2ban service immediately and create configuration files:		Start the fail2ban service immediately and create configuration files:
	{{cmd \|~~/etc/init.d/~~fail2ban start}}		{{cmd \|rc-service fail2ban start}}
	List services to verify fail2ban is enabled:		List services to verify fail2ban is enabled:
	{{cmd \| rc-status}}		{{cmd \| rc-status}}
Line 91:		Line 91:
	maxlines = 10		maxlines = 10
	</pre>		</pre>
	*~~/etc/init.d/~~fail2ban restart		*rc-service fail2ban restart

	===How to test new filters===		===How to test new filters===

2019-09-13T14:24:46Z

← Older revision		Revision as of 14:24, 13 September 2019
Line 1:		Line 1:
			{{TOC right}}

	== Install ==		== Install ==
	This will install fail2ban package. It includes iptables package (see also [[Configure_Networking#Firewalling_with_iptables_and_ip6tables]])		This will install fail2ban package. It includes iptables package (see also [[Configure_Networking#Firewalling_with_iptables_and_ip6tables]])
Line 156:		Line 158:
	bantime = 24h		bantime = 24h
	</pre>		</pre>


			[[category:Security]]

2018-10-11T20:45:19Z

Different ssh port number

@@ Line 128: / Line 128: @@
 logpath  = /var/log/messages
 maxretry = 2
 </pre>

2018-10-11T20:16:16Z

Alpine new sshd key filter

2018-10-11T20:10:26Z

Alpine new sshd key filter

← Older revision		Revision as of 20:10, 11 October 2018
Line 40:		Line 40:
	**attempts to login with wrong passphrase aren't logged		**attempts to login with wrong passphrase aren't logged
	*https://serverfault.com/questions/686422/modify-fail2ban-failregex-to-match-failed-public-key-authentications-via-ssh/686436 solution doesn't work out of the box, so the custom setup for alpine is:		*https://serverfault.com/questions/686422/modify-fail2ban-failregex-to-match-failed-public-key-authentications-via-ssh/686436 solution doesn't work out of the box, so the custom setup for alpine is:
	{{cmd \| ~~cat~~ /etc/fail2ban/jail.d/alpine-ssh.conf }}		{{cmd \| vi /etc/fail2ban/jail.d/alpine-ssh.conf }}
	<pre>		<pre>
	[sshd]		[sshd]
Line 63:		Line 63:
	maxretry = 2		maxretry = 2
	</pre>		</pre>
	{{cmd \| ~~cat~~ /etc/fail2ban/filter.d/alpine-sshd-key.conf }}		{{cmd \| vi /etc/fail2ban/filter.d/alpine-sshd-key.conf }}
	<pre>		<pre>
	# Fail2Ban filter for openssh for Alpine		# Fail2Ban filter for openssh for Alpine

2018-10-10T03:27:10Z

Alpine new sshd key filter

@@ Line 1: / Line 1: @@
 == Install ==
-*{{cmd |apk add fail2ban}}
+This will install fail2ban package. It includes iptables package (see also [[Configure_Networking#Firewalling_with_iptables_and_ip6tables]])
-** This will install iptables package also [[Configure_Networking#Firewalling_with_iptables_and_ip6tables]]
+{{cmd |apk add fail2ban}}

2018-10-09T23:44:36Z

← Older revision		Revision as of 23:44, 9 October 2018
Line 1:		Line 1:
	== Install ==		== Install ==
	*apk add fail2ban		*{{cmd \|apk add fail2ban}}
	** This will install iptables package also [[Configure_Networking#Firewalling_with_iptables_and_ip6tables]]		** This will install iptables package also [[Configure_Networking#Firewalling_with_iptables_and_ip6tables]]

2018-10-09T23:39:04Z

Created page with "== Install == *apk add fail2ban ** This will install iptables package also Configure_Networking#Firewalling_with_iptables_and_ip6tables"

New page

== Install ==
*apk add fail2ban
** This will install iptables package also [[Configure_Networking#Firewalling_with_iptables_and_ip6tables]]