https://wiki.bwt.com.de/index.php?action=history&feed=atom&title=Fail2Ban
Fail2Ban - Revision history
2026-05-13T20:47:11Z
Revision history for this page on the wiki
MediaWiki 1.43.0
https://wiki.bwt.com.de/index.php?title=Fail2Ban&diff=367&oldid=prev
BrainwreckedTech: Made TOC float left and added description
2019-12-11T08:11:04Z
<p>Made TOC float left and added description</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 04:11, 11 December 2019</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td>
<td colspan="2" class="diff-lineno">Line 1:</td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"><div style="float:left; margin-right:0.5em; margin-bottom:0.5em;">__TOC__</div></ins></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Fail2ban protects computers from brute-force attacks like password guessing and exploit scanning. Fail2ban monitors the system's log files for malicious incoming activity. If detected, fail2ban can ban the IP, e-mail a notification, or any other arbitrary action. Note that fail2ban is weak against DDoS attacks since it identifies activity by IP address, unless the individual IPs involved happen to trigger fail2ban on their own.</ins></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>= Fail2Ban Setup =</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>= Fail2Ban Setup =</div></td></tr>
</table>
BrainwreckedTech
https://wiki.bwt.com.de/index.php?title=Fail2Ban&diff=341&oldid=prev
BrainwreckedTech: Created page.
2019-12-08T14:05:14Z
<p>Created page.</p>
<p><b>New page</b></p><div><br />
<br />
= Fail2Ban Setup =<br />
<br />
== Main Configuration ==<br />
<br />
{{hc|/etc/fail2ban/jail.local|2=<br />
[DEFAULT]<br />
bantime = 1d<br />
destemail = root@bwt.com.de<br />
sender = fail2ban@bwt.com.de<br />
action = %(action_mwl)s<br />
}}<br />
<br />
== SSHD Configuration ==<br />
<br />
{{hc|/etc/fail2ban/jail.d/sshd.local|2=<br />
[sshd]<br />
enabled = true<br />
filter = sshd<br />
banaction = iptables<br />
backend = systemd<br />
maxretry = 5<br />
findtime = 1d<br />
bantime = 2w<br />
ignoreip = 127.0.0.1/8<br />
}}<br />
<br />
== Postfix-ISPmail Configuration ==<br />
<br />
{{hc|/etc/fail2ban/jail.d/postfix-ispmail.local|2=<br />
[postfix-ispmail]<br />
enabled = true<br />
filter = postfix<br />
port = smtp,submission<br />
banaction = iptables<br />
backend = systemd<br />
maxretry = 5<br />
findtime = 1d<br />
bantime = 2w<br />
ignoreip = 192.99.246.231/32<br />
}}<br />
<br />
{{hc|/etc/fail2ban/filter.d/postfix-ispmail.conf|2=<br />
<nowiki>[INCLUDES]<br />
before = common.conf<br />
<br />
[Definition]<br />
_daemon = postfix(-\w+)?/(?:submission/|smtps/)?smtp[ds]<br />
failregex = ^%(__prefix_line)slost connection after AUTH from \S+\[<HOST>\]$<br />
ignoreregex =<br />
<br />
[Init]<br />
journalmatch = _SYSTEMD_UNIT=postfix.service</nowiki><br />
}}</div>
BrainwreckedTech