fail2ban
Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
|
fail2ban [2019-07-10 19:34:34] mi created |
fail2ban [2020-12-03 12:12:59] (current) mi |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | ====== Fail2Ban ====== | ||
| + | |||
| ===== Test jail ===== | ===== Test jail ===== | ||
| <code ini /etc/fail2ban/paths-test.conf> | <code ini /etc/fail2ban/paths-test.conf> | ||
| Line 52: | Line 54: | ||
| find /etc/fail2ban -type f -name "*.local" | rsync -av --files-from=- / "$destination"/ | find /etc/fail2ban -type f -name "*.local" | rsync -av --files-from=- / "$destination"/ | ||
| + | host=host.example.com; port=22; id=~/.ssh/identity; dest=./ | ||
| + | ssh -p $port -i $id root@$host 'cd /etc/fail2ban && find . -type f -name "*.local"' \ | ||
| + | | rsync -e "ssh -p $port -i $id" -avi -R --files-from=- $host:/etc/fail2ban/ $dest/fail2ban/$host/ | ||
| + | ===== Unban ===== | ||
| + | |||
| + | <code sh> | ||
| + | # ip=194.230.155.162 | ||
| + | # jail=dovecot # from "Subject: [Fail2Ban] dovecot: banned 194.230.155.162 ..." | ||
| + | |||
| + | # ipset -n list | ||
| + | ... | ||
| + | f2b | ||
| + | ... | ||
| + | |||
| + | # ipset list f2b | grep $ip | ||
| + | 194.230.155.162 timeout 77556 | ||
| + | |||
| + | # fail2ban-client -v -v set $jail unbanip $ip | ||
| + | INFO Loading configs for fail2ban under /etc/fail2ban | ||
| + | DEBUG Reading configs for fail2ban under /etc/fail2ban | ||
| + | DEBUG Reading config files: /etc/fail2ban/fail2ban.conf | ||
| + | INFO Loading files: ['/etc/fail2ban/fail2ban.conf'] | ||
| + | INFO Loading files: ['/etc/fail2ban/fail2ban.conf'] | ||
| + | INFO Using socket file /var/run/fail2ban/fail2ban.sock | ||
| + | DEBUG OK : '194.230.155.162' | ||
| + | DEBUG Beautify '194.230.155.162' with ['set', 'dovecot', 'unbanip', '194.230.155.162'] | ||
| + | 194.230.155.162 | ||
| + | |||
| + | # ipset list f2b | grep $ip | ||
| + | </code> | ||
| ===== Divers ===== | ===== Divers ===== | ||
| Line 60: | Line 92: | ||
| * [[https://github.com/fail2ban/fail2ban/issues/727 | action_mwl and multi logs breaks start up · Issue #727]] | * [[https://github.com/fail2ban/fail2ban/issues/727 | action_mwl and multi logs breaks start up · Issue #727]] | ||
| + | {{tag>public linux}} | ||
/docs/dokuwiki/data/attic/fail2ban.1562780074.txt.gz · Last modified: 2019-07-10 19:34:34 by mi
Page Tools
