firewall and fail2ban
firewall and fail2ban
The new VESTA firewall is working great but I was wondering if I can now install (Centos 6) fail2ban?
Will one rule out the other?
My logs show loads of ssh attacks by specific IPs which are stopped after 5 attempts but then continue again
Thanks
Fred
Will one rule out the other?
My logs show loads of ssh attacks by specific IPs which are stopped after 5 attempts but then continue again
Thanks
Fred
Re: firewall and fail2ban
sudo nano /etc/fail2ban/jail.local
add this (3600 sec or if you want 31536000 seconds=1 year):
[DEFAULT]
bantime = 3600
sudo service fail2ban stop
sudo service fail2ban start
add this (3600 sec or if you want 31536000 seconds=1 year):
[DEFAULT]
bantime = 3600
sudo service fail2ban stop
sudo service fail2ban start
Re: firewall and fail2ban
Thanks melkerman
Sound exactly what I will do when I install fail2ban.
My main question was if it is ok to install fail2ban in the first place but after reading further into loads of other forums about fail2ban it seems that all firewall apps feed into the IPtables separately (chains) so should be ok. I'll use your settings.
Regards
Fred
Sound exactly what I will do when I install fail2ban.
My main question was if it is ok to install fail2ban in the first place but after reading further into loads of other forums about fail2ban it seems that all firewall apps feed into the IPtables separately (chains) so should be ok. I'll use your settings.
Regards
Fred