fail2ban
dinsdag, 23 januari 2007
Some days ago I found in my /var/log/aut.log a lot of failed ssh-login attempts. I wondered if there was a little utility for Ubuntu which could block these attackers. I didn't want to download, compile and install a program. I had to be in the Ubuntu repositories. If found ban2fail. Here are the tweaks I made to it:

 

edited the option "ignoreip" to:
ignoreip = 192.168.1.0/24 10.0.0.0/24 192.168.0.0/24 83.80.25.73

Changed "bantime" to:
bantime = 86400

Added my email address to:
to = " This email address is being protected from spam bots, you need Javascript enabled to view it "

And I enabled the vsftpd section. 
 
< Prev   Next >