Page 1 of 1

How to block permanent IP range on Fail2ban?

Posted: Fri Aug 16, 2019 2:15 pm
by DuronBR
How to block permanent IP range on Fail2ban?

For example:
87.0.0.0/8
92.0.0.0/8
116.0.0.0/8
119.0.0.0/8
122.0.0.0/8
211.0.0.0/8


Searching I found something like:

Code: Select all

File: jail.local

Add:
banip 87.0.0.0/8
banip 92.0.0.0/8
banip 116.0.0.0/8
banip 119.0.0.0/8
banip 122.0.0.0/8
banip 211.0.0.0/8


For the panel has a limit of 5 tracks, I would like to know how to add more ip tracks.
https://mydomain.com:8083/list/firewall/banlist/

I did not succeed, anyone know how?

Re: How to block permanent IP range on Fail2ban?

Posted: Fri Aug 16, 2019 3:18 pm
by Wibols
You can add a new rule in "VestaCP/Firewall/Fail2Ban/+". For example, 123.123.123.0/24 blocks all IPs from 123.123.123.0 to 123.123.123.254 for ever.

Re: How to block permanent IP range on Fail2ban?

Posted: Fri Aug 16, 2019 8:14 pm
by DuronBR
Wibols wrote:
Fri Aug 16, 2019 3:18 pm
You can add a new rule in "VestaCP/Firewall/Fail2Ban/+". For example, 123.123.123.0/24 blocks all IPs from 123.123.123.0 to 123.123.123.254 for ever.
Vestacp is limiting to 5 ip ranges!
I need to block ip tracks from an entire country.