ENH: Use .local config files for logtarget and jail

Per: https://github.com/fail2ban/fail2ban/pull/182#discussion_r3886353
pull/182/head
jamesstout 2013-04-30 04:35:36 +08:00
parent 018913db6a
commit 86a5de040b
1 changed files with 18 additions and 4 deletions

View File

@ -67,10 +67,24 @@ fail2ban.
FAIL2BAN CONFIGURATION FAIL2BAN CONFIGURATION
OPT: Edit /etc/fail2ban/fail2ban.conf and change logtarget to /var/adm/fail2ban.log OPT: Create /etc/fail2ban/fail2ban.local containing:
REQ: Edit /etc/fail2ban/jail.conf and move down to the [ssh-tcpwrapper] section.
Here, set enabled = true and logpath = /var/adm/auth.log. Set the sendmail logtarget = /var/adm/fail2ban.log
dest address to something useful or drop the line to stop it spamming you.
REQ: Create /etc/fail2ban/jail.local containing:
[ssh-tcpwrapper]
enabled = true
filter = sshd
action = hostsdeny
sendmail-whois[name=SSH, dest=you@example.com]
ignoreregex = for myuser from
logpath = /var/adm/auth.log
Set the sendmail dest address to something useful or drop the line to stop it spamming you.
Set 'myuser' to your username to avoid banning yourself or drop it.
START (OR RESTART) FAIL2BAN START (OR RESTART) FAIL2BAN