Fail2ban dovecot: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
 
Zeile 4: Zeile 4:
 
*hydra -S -v -l xinux -P bad-passwords -s 993 -f 10.88.201.21 imap
 
*hydra -S -v -l xinux -P bad-passwords -s 993 -f 10.88.201.21 imap
 
=sshd in fail2ban aktivieren=
 
=sshd in fail2ban aktivieren=
*echo -e "[dovecote]\nenabled = true\n" >> /etc/fail2ban/jail.local
+
*echo -e "[dovecot]\nenabled = true\n" >> /etc/fail2ban/jail.local
  
 
=fail2ban neustarten=
 
=fail2ban neustarten=

Aktuelle Version vom 14. Dezember 2022, 09:25 Uhr

Hydra installieren

  • apt install hydra

brute Force auf den Rechner

  • hydra -S -v -l xinux -P bad-passwords -s 993 -f 10.88.201.21 imap

sshd in fail2ban aktivieren

  • echo -e "[dovecot]\nenabled = true\n" >> /etc/fail2ban/jail.local

fail2ban neustarten

  • systemctl restart fail2ban

Status checken

  • fail2ban-client status dovecot
Status for the jail: dovecot
|- Filter
|  |- Currently failed:	0
|  |- Total failed:	45
|  `- File list:	/var/log/mail.log
`- Actions
   |- Currently banned:	0
   |- Total banned:	1
   `- Banned IP list:

Alles unbannen

  • fail2ban-client unban --all