User Tools

Site Tools


networking:linux:fail2ban

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
networking:linux:fail2ban [2017/03/15 08:43]
gcooper
networking:linux:fail2ban [2017/03/15 08:51] (current)
gcooper
Line 2: Line 2:
  
 https://www.digitalocean.com/community/articles/how-to-protect-ssh-with-fail2ban-on-centos-6 https://www.digitalocean.com/community/articles/how-to-protect-ssh-with-fail2ban-on-centos-6
-http://www.fail2ban.org/wiki/index.php/Fail2ban:Community_Portal#Count_.22Last_message_repeated_N_times.22_correctly 
  
   * Fail2Ban is easy to configure, but it is a reliable and flexible tool to combat attacks and probes.   * Fail2Ban is easy to configure, but it is a reliable and flexible tool to combat attacks and probes.
Line 248: Line 247:
  
 ===== Troubleshooting ===== ===== Troubleshooting =====
 +
 +**Correctly count login failures**: http://www.fail2ban.org/wiki/index.php/Fail2ban:Community_Portal#Count_.22Last_message_repeated_N_times.22_correctly
 +
 +<file>
 +sudo sed -i 's/RepeatedMsgReduction\ on/RepeatedMsgReduction\ off/' /etc/rsyslog.conf
 +sudo service rsyslog restart
 +sudo service fail2ban restart
 +</file>
  
 :!: If you can test a filter successfully with ''fail2ban-regex'', but no firewall rules are being added, try using ''polling'' instead of ''gamin'' or ''auto''. :!: If you can test a filter successfully with ''fail2ban-regex'', but no firewall rules are being added, try using ''polling'' instead of ''gamin'' or ''auto''.
networking/linux/fail2ban.1489589014.txt.gz · Last modified: 2017/03/15 08:43 by gcooper