Go to file
Yaroslav Halchenko d59c41197e Merge commit '0.8.8-276-g5e1d8b0' into debian
* commit '0.8.8-276-g5e1d8b0': (103 commits)
  ENH: logs/sshd -- have ":" after [daemon] (other uses are uncommon)
  ENH: logs/sshd -- use example.com as the resolved hostname in sample log lines
  ENH: filter.d/sshd.conf -- allow for trailing "via IP" in logs
  ENH: Removed unused log line
  ENH: logrotate file
  ENH: some form of logrotate based on what distros are doing
  DOC: macports distribution of fail2ban
  TST: test case for <br> tags in action
  DOC: credits for BSD ssh filter changes
  EHN: enhance sshd filter for bsd.
  DOC: purge of svn tags
  Slight tune up of changelog entry (treeish change due to squashing)
  fixed test date thx to steven
  tight control of the filter for ASSP
  as yaroslav wishes
  as daniel desires
  changed from DateASSPlike class to DateStrptime
  fixed little things
  added new date format support for ASSP SMTP Proxy
  Forgotten Changelog entry for "is None" changes
  ...
2013-05-07 12:33:13 -04:00
client DOC: purge of svn tags 2013-05-03 16:03:38 +10:00
common DOC: purge of svn tags 2013-05-03 16:03:38 +10:00
config ENH: filter.d/sshd.conf -- allow for trailing "via IP" in logs 2013-05-07 12:22:49 -04:00
debian adjusted changelog 2013-03-27 12:03:13 -04:00
doc Fixed typos 2013-03-10 22:05:33 +00:00
files Merge: opensolaris docs/fixes, no 'sed -i' in hostsdeny, sshd regex tuneups 2013-05-06 11:11:12 -04:00
man DOC: document <br> tag 2013-04-28 11:26:03 +10:00
server DOC: purge of svn tags 2013-05-03 16:03:38 +10:00
testcases ENH: logs/sshd -- have ":" after [daemon] (other uses are uncommon) 2013-05-07 12:30:05 -04:00
.coveragerc TST+BF: Use separate coveragerc for Travis CI 2013-03-29 20:14:13 +00:00
.gitignore ENH: git ignore failed patch reminants 2013-03-16 13:53:51 +11:00
.project - Added Eclipse project file 2006-10-17 21:24:27 +00:00
.pydevproject - Removed Python 2.4. Minimum required version is now Python 2.3. 2007-12-16 21:38:04 +00:00
.pylintrc ENH: added a .pylintrc to help with consistent appearance and catch obvious problems 2011-10-04 10:55:16 -04:00
.travis.yml TST: Coverage for coveralls.io should only be run on success 2013-04-14 15:56:14 +01:00
.travis_coveragerc TST: Add gamin support for Travis CI 2013-03-30 18:17:01 +00:00
COPYING - Added ISO 8601 date/time format. 2008-05-18 19:53:18 +00:00
ChangeLog DOC: credits for BSD ssh filter changes 2013-05-03 16:19:44 +10:00
DEVELOP DOC: macports distribution of fail2ban 2013-05-03 16:59:54 +10:00
MANIFEST ENH: some form of logrotate based on what distros are doing 2013-05-03 17:05:28 +10:00
README.Solaris BF: fail2ban.local needs section headers 2013-04-30 05:41:29 +08:00
README.md updated README.md to hyperlink, add travis and coversall 2013-04-25 01:07:39 -03:00
THANKS added new date format support for ASSP SMTP Proxy 2013-05-03 00:56:46 -04:00
TODO added new date format support for ASSP SMTP Proxy 2013-05-03 00:56:46 -04:00
fail2ban-client ENH: "is None" instead of "== None" + tune ups in headers 2013-05-02 23:25:43 -04:00
fail2ban-regex ENH: deleted trailing spaces in fail2ban- cmdline tools 2013-03-29 12:31:50 -04:00
fail2ban-server ENH: deleted trailing spaces in fail2ban- cmdline tools 2013-03-29 12:31:50 -04:00
fail2ban-testcases ENH: adding ability to incorporate tracebacks into log lines while running tests 2013-03-25 23:05:48 -04:00
fail2ban-testcases-all ENH: fail2ban-testcases-all -- pass cmdline options to fail2ban-testcases 2012-11-07 11:34:20 -05:00
kill-server - Initial commit of the new development release 0.7 2006-06-26 20:05:00 +00:00
setup.cfg BF: Rename mentioning of README to README.md (Fixes #187) 2013-04-26 22:51:59 -04:00
setup.py BF: Rename mentioning of README to README.md (Fixes #187) 2013-04-26 22:51:59 -04:00

README.md

                     __      _ _ ___ _               
                    / _|__ _(_) |_  ) |__  __ _ _ _  
                   |  _/ _` | | |/ /| '_ \/ _` | ' \ 
                   |_| \__,_|_|_/___|_.__/\__,_|_||_|
                   v0.8.8                  2012/07/31

Fail2Ban: ban hosts that cause multiple authentication errors

Fail2Ban scans log files like /var/log/pwdfail and bans IP that makes too many password failures. It updates firewall rules to reject the IP address. These rules can be defined by the user. Fail2Ban can read multiple log files such as sshd or Apache web server ones.

This README is a quick introduction to Fail2ban. More documentation, FAQ, HOWTOs are available in fail2ban(1) manpage and on the website http://www.fail2ban.org

Installation:

It is possible that Fail2ban is already packaged for your distribution. In this case, you should use it instead.

Required:

Optional:

To install, just do:

tar xvfj fail2ban-0.8.8.tar.bz2
cd fail2ban-0.8.8
python setup.py install

This will install Fail2Ban into /usr/share/fail2ban. The executable scripts are placed into /usr/bin, and configuration under /etc/fail2ban.

Fail2Ban should be correctly installed now. Just type:

fail2ban-client -h

to see if everything is alright. You should always use fail2ban-client and never call fail2ban-server directly.

Configuration:

You can configure Fail2Ban using the files in /etc/fail2ban. It is possible to configure the server using commands sent to it by fail2ban-client. The available commands are described in the fail2ban-client(1) manpage. Also see fail2ban(1) manpage for further references and find even more documentation on the website: http://www.fail2ban.org

Code status:

  • tests status travis-ci.org (master branch)

  • Coverage Status

Contact:

You need some new features, you found bugs?

visit Issues and if your issue is not yet known -- file a bug report.

You would like to troubleshoot or discuss?

join the mailing list

You would like to contribute (new filters/actions/code/documentation)?

send a pull request

You just appreciate this program:

send kudos to the original author ([Cyril Jaquier](mailto: Cyril Jaquier cyril.jaquier@fail2ban.org) or better to the mailing list since Fail2Ban is "community-driven" for years now.

Thanks:

See THANKS file.

License:

Fail2Ban is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

Fail2Ban is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with Fail2Ban; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA