diff --git a/README.Solaris b/README.Solaris index b8883e7f..b03a31a1 100644 --- a/README.Solaris +++ b/README.Solaris @@ -67,10 +67,24 @@ fail2ban. FAIL2BAN CONFIGURATION -OPT: Edit /etc/fail2ban/fail2ban.conf and change logtarget to /var/adm/fail2ban.log -REQ: Edit /etc/fail2ban/jail.conf and move down to the [ssh-tcpwrapper] section. - Here, set enabled = true and logpath = /var/adm/auth.log. Set the sendmail - dest address to something useful or drop the line to stop it spamming you. +OPT: Create /etc/fail2ban/fail2ban.local containing: + +logtarget = /var/adm/fail2ban.log + + +REQ: Create /etc/fail2ban/jail.local containing: + +[ssh-tcpwrapper] + +enabled = true +filter = sshd +action = hostsdeny + sendmail-whois[name=SSH, dest=you@example.com] +ignoreregex = for myuser from +logpath = /var/adm/auth.log + +Set the sendmail dest address to something useful or drop the line to stop it spamming you. +Set 'myuser' to your username to avoid banning yourself or drop it. START (OR RESTART) FAIL2BAN