mirror of
https://github.com/thomiceli/opengist.git
synced 2024-12-23 13:02:39 +00:00
30 lines
581 B
Markdown
30 lines
581 B
Markdown
|
# Fail2ban setup
|
||
|
|
|
||
|
|
Fail2ban can be used to ban IPs that try to bruteforce the login page.
|
||
|
|
Log level must be set at least to `warn`.
|
||
|
|
|
||
|
|
Add this filter in `etc/fail2ban/filter.d/opengist.conf` :
|
||
|
|
```ini
|
||
|
|
[Definition]
|
||
|
|
failregex = Invalid .* authentication attempt from <HOST>
|
||
|
|
ignoreregex =
|
||
|
|
```
|
||
|
|
|
||
|
|
Add this jail in `etc/fail2ban/jail.d/opengist.conf` :
|
||
|
|
```ini
|
||
|
|
[opengist]
|
||
|
|
enabled = true
|
||
|
|
filter = opengist
|
||
|
|
logpath = /home/*/.opengist/log/opengist.log
|
||
|
|
maxretry = 10
|
||
|
|
findtime = 3600
|
||
|
|
bantime = 600
|
||
|
|
banaction = iptables-allports
|
||
|
|
port = anyport
|
||
|
|
```
|
||
|
|
|
||
|
|
Then run
|
||
|
|
```shell
|
||
|
|
service fail2ban restart
|
||
|
|
```
|