diff --git a/content/posts/fail2ban-basics.md b/content/posts/fail2ban-basics.md index 26f6927..bf191aa 100644 --- a/content/posts/fail2ban-basics.md +++ b/content/posts/fail2ban-basics.md @@ -9,7 +9,7 @@ tags = [ ] +++ -[Fail2ban](https://github.com/fail2ban/fail2ban) is a software which scans log files like `/var/log/auth.log` and bans IP addresses which done too many failed login attempts. +[Fail2ban](https://github.com/fail2ban/fail2ban) is a software which scans log files like `/var/log/auth.log` and bans IP addresses which have done too many failed login attempts. This is just one layer of security and should be used together with other tools and techniques such as iptables and SSH hardening. @@ -36,7 +36,7 @@ The `fail2ban.conf` contains the default configuration profile, it is a good pra cp /etc/fail2ban/fail2ban.conf /etc/fail2ban/fail2ban.local ``` -The defauls should make a working setup for now, so let's skip this for now. +The defaults should make a working setup for now, so let's skip this for now. Next, we have the `jail.conf` file, which is where we configure our "jails" as the name suggests. @@ -50,7 +50,7 @@ bantime.multipliers = 5 15 30 60 300 720 1440 2880 bantime = 86400 findtime = 86400 maxretry = 2 -ignoreip = 10.88.0.0/16 fd0d:6ce:3436::/48 +ignoreip = 192.2.0.0/24, 2001:0DB8::/32 [sshd] backend=systemd