mirror of https://github.com/fail2ban/fail2ban
ENH: Use .local config files for logtarget and jail
Per: https://github.com/fail2ban/fail2ban/pull/182#discussion_r3886353pull/182/head
parent
018913db6a
commit
86a5de040b
|
@ -67,10 +67,24 @@ fail2ban.
|
||||||
|
|
||||||
FAIL2BAN CONFIGURATION
|
FAIL2BAN CONFIGURATION
|
||||||
|
|
||||||
OPT: Edit /etc/fail2ban/fail2ban.conf and change logtarget to /var/adm/fail2ban.log
|
OPT: Create /etc/fail2ban/fail2ban.local containing:
|
||||||
REQ: Edit /etc/fail2ban/jail.conf and move down to the [ssh-tcpwrapper] section.
|
|
||||||
Here, set enabled = true and logpath = /var/adm/auth.log. Set the sendmail
|
logtarget = /var/adm/fail2ban.log
|
||||||
dest address to something useful or drop the line to stop it spamming you.
|
|
||||||
|
|
||||||
|
REQ: Create /etc/fail2ban/jail.local containing:
|
||||||
|
|
||||||
|
[ssh-tcpwrapper]
|
||||||
|
|
||||||
|
enabled = true
|
||||||
|
filter = sshd
|
||||||
|
action = hostsdeny
|
||||||
|
sendmail-whois[name=SSH, dest=you@example.com]
|
||||||
|
ignoreregex = for myuser from
|
||||||
|
logpath = /var/adm/auth.log
|
||||||
|
|
||||||
|
Set the sendmail dest address to something useful or drop the line to stop it spamming you.
|
||||||
|
Set 'myuser' to your username to avoid banning yourself or drop it.
|
||||||
|
|
||||||
START (OR RESTART) FAIL2BAN
|
START (OR RESTART) FAIL2BAN
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue