Fail2ban: Difference between revisions
Jump to navigation
Jump to search
(Created page with "jail.local [sshd] enabled = true port = ssh logpath = %(sshd_log)s backend = %(sshd_backend)s maxretry = 10 bantime = -1 action = iptables[name=SSH, port=22, protocol=tcp] telegram") |
No edit summary |
||
| Line 9: | Line 9: | ||
action = iptables[name=SSH, port=22, protocol=tcp] | action = iptables[name=SSH, port=22, protocol=tcp] | ||
telegram | telegram | ||
[apache-overflows] | |||
enabled = true | |||
port = http,https | |||
filter = apache-overflows | |||
logpath = /var/log/apache*/*error.log | |||
maxretry = 2 | |||
[apache-badbots] | |||
enabled = true | |||
port = http,https | |||
filter = apache-badbots | |||
logpath = /var/log/apache*/*error.log | |||
maxretry = 2 | |||
[apache-nohome] | |||
enabled = true | |||
port = http,https | |||
filter = apache-nohome | |||
logpath = /var/log/apache*/*error.log | |||
maxretry = 2 | |||
[php-url-fopen] | |||
enabled = true | |||
port = http,https | |||
filter = php-url-fopen | |||
logpath = /var/log/apache*/*access.log | |||
https://www.digitalocean.com/community/tutorials/how-to-protect-an-apache-server-with-fail2ban-on-ubuntu-14-04 | |||
Revision as of 01:50, 25 June 2024
jail.local
[sshd]
enabled = true
port = ssh
logpath = %(sshd_log)s
backend = %(sshd_backend)s
maxretry = 10
bantime = -1
action = iptables[name=SSH, port=22, protocol=tcp]
telegram
[apache-overflows]
enabled = true port = http,https filter = apache-overflows logpath = /var/log/apache*/*error.log maxretry = 2
[apache-badbots]
enabled = true port = http,https filter = apache-badbots logpath = /var/log/apache*/*error.log maxretry = 2
[apache-nohome]
enabled = true port = http,https filter = apache-nohome logpath = /var/log/apache*/*error.log maxretry = 2
[php-url-fopen]
enabled = true port = http,https filter = php-url-fopen logpath = /var/log/apache*/*access.log