thanwer/blog
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Minor fixes.

Browse Source
This commit is contained in:
Thanwer 2024-10-26 21:30:27 -03:00
parent 1981cebade
commit 6c4b9a16b5
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
content/posts/fail2ban-basics.md
View File

@ -9,7 +9,7 @@ tags = [
] ]
+++ +++
[Fail2ban](https://github.com/fail2ban/fail2ban) is a software which scans log files like `/var/log/auth.log` and bans IP addresses which done too many failed login attempts. [Fail2ban](https://github.com/fail2ban/fail2ban) is a software which scans log files like `/var/log/auth.log` and bans IP addresses which have done too many failed login attempts.
This is just one layer of security and should be used together with other tools and techniques such as iptables and SSH hardening. This is just one layer of security and should be used together with other tools and techniques such as iptables and SSH hardening.
@ -36,7 +36,7 @@ The `fail2ban.conf` contains the default configuration profile, it is a good pra
cp /etc/fail2ban/fail2ban.conf /etc/fail2ban/fail2ban.local cp /etc/fail2ban/fail2ban.conf /etc/fail2ban/fail2ban.local
``` ```
The defauls should make a working setup for now, so let's skip this for now. The defaults should make a working setup for now, so let's skip this for now.
Next, we have the `jail.conf` file, which is where we configure our "jails" as the name suggests. Next, we have the `jail.conf` file, which is where we configure our "jails" as the name suggests.
@ -50,7 +50,7 @@ bantime.multipliers = 5 15 30 60 300 720 1440 2880
bantime = 86400 bantime = 86400
findtime = 86400 findtime = 86400
maxretry = 2 maxretry = 2
ignoreip = 10.88.0.0/16 fd0d:6ce:3436::/48 ignoreip = 192.2.0.0/24, 2001:0DB8::/32
[sshd] [sshd]
backend=systemd backend=systemd