From 6c4b9a16b51f80a4deb4f335d46abb8b04b7cd85 Mon Sep 17 00:00:00 2001 From: Thanwer Date: Sat, 26 Oct 2024 21:30:27 -0300 Subject: [PATCH] Minor fixes. --- content/posts/fail2ban-basics.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/content/posts/fail2ban-basics.md b/content/posts/fail2ban-basics.md index 26f6927..bf191aa 100644 --- a/content/posts/fail2ban-basics.md +++ b/content/posts/fail2ban-basics.md @@ -9,7 +9,7 @@ tags = [ ] +++ -[Fail2ban](https://github.com/fail2ban/fail2ban) is a software which scans log files like `/var/log/auth.log` and bans IP addresses which done too many failed login attempts. +[Fail2ban](https://github.com/fail2ban/fail2ban) is a software which scans log files like `/var/log/auth.log` and bans IP addresses which have done too many failed login attempts. This is just one layer of security and should be used together with other tools and techniques such as iptables and SSH hardening. @@ -36,7 +36,7 @@ The `fail2ban.conf` contains the default configuration profile, it is a good pra cp /etc/fail2ban/fail2ban.conf /etc/fail2ban/fail2ban.local ``` -The defauls should make a working setup for now, so let's skip this for now. +The defaults should make a working setup for now, so let's skip this for now. Next, we have the `jail.conf` file, which is where we configure our "jails" as the name suggests. @@ -50,7 +50,7 @@ bantime.multipliers = 5 15 30 60 300 720 1440 2880 bantime = 86400 findtime = 86400 maxretry = 2 -ignoreip = 10.88.0.0/16 fd0d:6ce:3436::/48 +ignoreip = 192.2.0.0/24, 2001:0DB8::/32 [sshd] backend=systemd