User Tools

Site Tools


fail2ban

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
fail2ban [2023/07/10 18:41] – created - external edit 127.0.0.1fail2ban [2024/07/23 16:19] (current) – external edit 127.0.0.1
Line 3: Line 3:
 copy jail.conf to jail.local copy jail.conf to jail.local
  
-cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local+<code>cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local</code>
  
 open jail.local open jail.local
  
-nano /etc/fail2ban/jail.local+<code>nano /etc/fail2ban/jail.local</code>
  
 scroll down to the section [SSHD] scroll down to the section [SSHD]
Line 14: Line 14:
 [sshd] [sshd]
  
-To use more aggressive sshd modes set filter parameter "mode" in jail.local: +To use more aggressive sshd modes set filter parameter "mode" in jail.local:
-# normal (default), ddos, extra or aggressive (combines all). +
-# See "tests/files/logs/sshd" or "filter.d/sshd.conf" for usage example and details. +
-#mode   = normal+
  
-logpath = /var/log/secure+-normal (default),  
 + 
 +-ddos,  
 + 
 +-extra or  
 + 
 +-aggressive (combines all). 
 + 
 +See "tests/files/logs/sshd" or "filter.d/sshd.conf" for usage example and details. 
 +mode   = normal 
 + 
 +<code>logpath = /var/log/secure
 backend = auto backend = auto
 enabled = true enabled = true
Line 27: Line 35:
 findtime = 300 findtime = 300
 bantime = 86400 bantime = 86400
-ignoreip = 127.0.0.1 192.168.0.*+ignoreip = 127.0.0.1 192.168.0.*</code>
fail2ban.1689014516.txt.gz · Last modified: 2024/07/23 16:19 (external edit)