Difference between revisions of "Fail2ban Vuurmuur"

From MS Computech
Jump to: navigation, search
(New page: Fail2ban + Vuurmuur <pre>apt-get install fail2ban nano /etc/fail2ban/action.d/vuurmuur.conf </pre><pre># Fail2Ban configuration file # # [Definition] # Option: actionban # Notes.: com...)
 
Line 5: Line 5:
 
#
 
#
 
#
 
#
 
 
[Definition]
 
[Definition]
  
# Option: actionban
+
# Option: actionban
# Notes.: command executed when banning an IP. Take care that the
+
# Notes.: command executed when banning an IP. Take care that the
#         command is executed with Fail2Ban user rights.
+
# command is executed with Fail2Ban user rights.
# Tags:   &lt;ip&gt; IP address
+
# Tags: &lt;ip&gt; IP address
#         &lt;failures&gt; number of failures
+
# &lt;failures&gt; number of failures
#         &lt;time&gt; unix timestamp of the ban time
+
# &lt;time&gt; unix timestamp of the ban time
# Values: CMD
+
# Values: CMD
 
#
 
#
 
actionban = vuurmuur_script --block &lt;ip&gt; --apply
 
actionban = vuurmuur_script --block &lt;ip&gt; --apply
  
# Option: actionunban
+
# Option: actionunban
# Notes.: command executed when unbanning an IP. Take care that the
+
# Notes.: command executed when unbanning an IP. Take care that the
#         command is executed with Fail2Ban user rights.
+
# command is executed with Fail2Ban user rights.
# Tags:   &lt;ip&gt; IP address
+
# Tags: &lt;ip&gt; IP address
#         &lt;failures&gt; number of failures
+
# &lt;failures&gt; number of failures
#         &lt;time&gt; unix timestamp of the ban time
+
# &lt;time&gt; unix timestamp of the ban time
# Values: CMD
+
# Values: CMD
 
#
 
#
 
actionunban = vuurmuur_script --unblock &lt;ip&gt; --apply
 
actionunban = vuurmuur_script --unblock &lt;ip&gt; --apply
 +
 
</pre>
 
</pre>
 
The parameter –apply makes the rule active and reloads vuurmuurs configuration. Open /etc/fail2ban/jail.conf in your favorite editor and search the option banaction and change it as follows:  
 
The parameter –apply makes the rule active and reloads vuurmuurs configuration. Open /etc/fail2ban/jail.conf in your favorite editor and search the option banaction and change it as follows:  

Revision as of 01:21, 27 May 2009

Fail2ban + Vuurmuur

apt-get install fail2ban
nano /etc/fail2ban/action.d/vuurmuur.conf
# Fail2Ban configuration file

[Definition]

  1. Option: actionban
  2. Notes.: command executed when banning an IP. Take care that the
  3. command is executed with Fail2Ban user rights.
  4. Tags: <ip> IP address
  5. <failures> number of failures
  6. <time> unix timestamp of the ban time
  7. Values: CMD

actionban = vuurmuur_script --block <ip> --apply

  1. Option: actionunban
  2. Notes.: command executed when unbanning an IP. Take care that the
  3. command is executed with Fail2Ban user rights.
  4. Tags: <ip> IP address
  5. <failures> number of failures
  6. <time> unix timestamp of the ban time
  7. Values: CMD

actionunban = vuurmuur_script --unblock <ip> --apply

The parameter –apply makes the rule active and reloads vuurmuurs configuration. Open /etc/fail2ban/jail.conf in your favorite editor and search the option banaction and change it as follows:

nano /etc/fail2ban/jail.conf
banaction = vuurmuur

source