fail2ban basic config


SUBMITTED BY: Guest

DATE: May 7, 2014, 5:42 p.m.

FORMAT: Text only

SIZE: 2.0 kB

HITS: 1408

  1. [DEFAULT]
  2. ignoreip = 127.0.0.1 82.192.71.9 95.211.46.207
  3. bantime = 86400
  4. destemail = you@your-email.com
  5. banaction = iptables-multiport
  6. action = %(action_mwl)s
  7. # JAILS
  8. [ssh]
  9. enabled = true
  10. maxretry = 3
  11. [pam-generic]
  12. enabled = true
  13. banaction = iptables-allports
  14. [ssh-ddos]
  15. enabled = true
  16. [webmin]
  17. enabled = true
  18. port = 10000,20000
  19. filter = webmin-auth
  20. banaction = iptables-multiport
  21. action = %(action_mwl)s
  22. logpath = /var/log/auth.log
  23. maxretry = 3
  24. [apache]
  25. enabled = true
  26. [apache-noscript]
  27. enabled = true
  28. port = http,https
  29. banaction = iptables-multiport
  30. action = %(action_mwl)s
  31. [apache-overflows]
  32. enabled = true
  33. [apache-badbots]
  34. enabled = true
  35. port = http,https
  36. filter = apache-badbots
  37. banaction = iptables-allports
  38. action = %(action_mwl)s
  39. logpath = /var/log/apache*/*access.log
  40. maxretry = 1
  41. [apache-nohome]
  42. enabled = true
  43. port = http,https
  44. filter = apache-nohome
  45. banaction = iptables-multiport
  46. action = %(action_mwl)s
  47. logpath = /var/log/apache*/*access.log
  48. maxretry = 1
  49. [php-url-fopen]
  50. enabled = true
  51. port = http,https
  52. filter = php-url-fopen
  53. logpath = /var/log/apache*/*access.log
  54. maxretry = 1
  55. [exim]
  56. enabled = true
  57. filter = exim
  58. port = smtp,ssmtp
  59. logpath = /var/log/exim*/rejectlog
  60. maxretry = 1
  61. [apache-w00tw00t]
  62. enabled = true
  63. port = http,https
  64. filter = apache-w00tw00t
  65. banaction = iptables-allports
  66. action = %(action_mwl)s
  67. logpath = /var/log/apache*/*error.log
  68. maxretry = 1
  69. [apache-myadmin]
  70. enabled = true
  71. port = http,https
  72. filter = apache-myadmin
  73. banaction = iptables-allports
  74. action = %(action_mwl)s
  75. logpath = /var/log/apache*/*error.log
  76. maxretry = 2

comments powered by Disqus