mirror of https://github.com/fail2ban/fail2ban
ENH: Use .local config files for logtarget and jail
Per: https://github.com/fail2ban/fail2ban/pull/182#discussion_r3886353pull/182/head
parent
018913db6a
commit
86a5de040b
|
@ -67,10 +67,24 @@ fail2ban.
|
|||
|
||||
FAIL2BAN CONFIGURATION
|
||||
|
||||
OPT: Edit /etc/fail2ban/fail2ban.conf and change logtarget to /var/adm/fail2ban.log
|
||||
REQ: Edit /etc/fail2ban/jail.conf and move down to the [ssh-tcpwrapper] section.
|
||||
Here, set enabled = true and logpath = /var/adm/auth.log. Set the sendmail
|
||||
dest address to something useful or drop the line to stop it spamming you.
|
||||
OPT: Create /etc/fail2ban/fail2ban.local containing:
|
||||
|
||||
logtarget = /var/adm/fail2ban.log
|
||||
|
||||
|
||||
REQ: Create /etc/fail2ban/jail.local containing:
|
||||
|
||||
[ssh-tcpwrapper]
|
||||
|
||||
enabled = true
|
||||
filter = sshd
|
||||
action = hostsdeny
|
||||
sendmail-whois[name=SSH, dest=you@example.com]
|
||||
ignoreregex = for myuser from
|
||||
logpath = /var/adm/auth.log
|
||||
|
||||
Set the sendmail dest address to something useful or drop the line to stop it spamming you.
|
||||
Set 'myuser' to your username to avoid banning yourself or drop it.
|
||||
|
||||
START (OR RESTART) FAIL2BAN
|
||||
|
||||
|
|
Loading…
Reference in New Issue