Fail2ban Handling: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| Zeile 18: | Zeile 18: | ||
logpath = /var/log/auth.log | logpath = /var/log/auth.log | ||
maxretry = 4 | maxretry = 4 | ||
| + | </pre> | ||
| + | =Example dovcote= | ||
| + | <pre> | ||
| + | [dovecot] | ||
| + | enabled = true | ||
| + | port = pop3,pop3s,imap,imaps | ||
| + | filter = dovecot | ||
| + | logpath = /var/log/mail.log | ||
| + | maxretry = 3 | ||
</pre> | </pre> | ||
=Links= | =Links= | ||
*https://www.thomas-krenn.com/de/wiki/SSH_Login_unter_Debian_mit_fail2ban_absichern | *https://www.thomas-krenn.com/de/wiki/SSH_Login_unter_Debian_mit_fail2ban_absichern | ||
Version vom 28. September 2022, 18:30 Uhr
Install
- sudo apt install fail2ban
Nach der Installation stehen folgende Programme zur Verfügung
- fail2ban-server - der Server
- fail2ban-client - Clientprogramm zur Konfiguration und Auswertung des Servers
- fail2ban-regex - Programm zum Testen von Regular-Expressions[7]
Konfigurationsdatein
Config
- sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
Example ssh
[sshd] enabled = true port = ssh filter = sshd logpath = /var/log/auth.log maxretry = 4
Example dovcote
[dovecot] enabled = true port = pop3,pop3s,imap,imaps filter = dovecot logpath = /var/log/mail.log maxretry = 3