Vesta Control Panel - Forum

Tbh, i'm having issues with fail2ban at the moment but it's pre-configured out of the box for you. Login to shell and it should be /etc/fail2ban (I use CentOS however). There is no GUI tool for config. Only banning IP's is configured through the CP itself. https://<yourdomain.com>:<portnumber>/list/...

Ahh, makes sense. I have never used fail2ban before and the topics on serverfault suggest using .conf not .local hence where i went wrong.

Does fail2ban have logs itself ? I can see IPtables is injecting a rule but yet I am still hammering ssh with passwords. It's like it's oblivious.

Comes as part of the install.

What do I amend in this file exactly ?

[ssh-iptables]
enabled = true
filter = sshd
action = vesta[name=SSH]
logpath = /var/log/secure
maxretry = 5

Ta.

So as most of you I am running shell access on an alternative port, let's say 2220 as an example. Fail 2 band is listening for attempts on ssh via the ssh port number right? IE 22? How do I change this to the port number sshd is listening on so I can prevent brute force attempts on my box. I have am...

IPtables? Single source address / range.

Alternative ssh port? Stop brute force bots hammering you.

This sounds like an issue with the port forward... I would suggest if you are just getting stated to try it on a VPS and remove the possibility of getting such errors for the time being. Try Digital Ocean droplets for $5 you can get a good start. If you are persisting on going via your ISP, then try...

Grep part of the welcome email string:
Located in the file /usr/local/vesta/web/inc/i18n/en.php

However, there is probably an actual template for this, but can't locate it at the moment :/

Thanks.

Interesting, I would like to see a min / maximum value set so we don't have the prefix and some sort of Ajax check for existing DBnames. I know there are panels out there where you can set this yourself.

Is it possible to create FTP logins and DB's etc .. without the need for the (user)_ prefix? I would prefer to be able to just have a simple username not based around the account. I appreciate this is likely built in to the service for a reason but it just bugs me.

Thanks.