From 86a5de040ba9bcee897fe5c2b1aaa0a0a695eb7c Mon Sep 17 00:00:00 2001 From: jamesstout Date: Tue, 30 Apr 2013 04:35:36 +0800 Subject: [PATCH] ENH: Use .local config files for logtarget and jail Per: https://github.com/fail2ban/fail2ban/pull/182#discussion_r3886353 --- README.Solaris | 22 ++++++++++++++++++---- 1 file changed, 18 insertions(+), 4 deletions(-) diff --git a/README.Solaris b/README.Solaris index b8883e7f9..b03a31a1a 100644 --- a/README.Solaris +++ b/README.Solaris @@ -67,10 +67,24 @@ fail2ban. FAIL2BAN CONFIGURATION -OPT: Edit /etc/fail2ban/fail2ban.conf and change logtarget to /var/adm/fail2ban.log -REQ: Edit /etc/fail2ban/jail.conf and move down to the [ssh-tcpwrapper] section. - Here, set enabled = true and logpath = /var/adm/auth.log. Set the sendmail - dest address to something useful or drop the line to stop it spamming you. +OPT: Create /etc/fail2ban/fail2ban.local containing: + +logtarget = /var/adm/fail2ban.log + + +REQ: Create /etc/fail2ban/jail.local containing: + +[ssh-tcpwrapper] + +enabled = true +filter = sshd +action = hostsdeny + sendmail-whois[name=SSH, dest=you@example.com] +ignoreregex = for myuser from +logpath = /var/adm/auth.log + +Set the sendmail dest address to something useful or drop the line to stop it spamming you. +Set 'myuser' to your username to avoid banning yourself or drop it. START (OR RESTART) FAIL2BAN