From 123e38b970c6b58e2614fe39f7889cf1e29527f0 Mon Sep 17 00:00:00 2001 From: Oxbian Date: Fri, 28 Apr 2023 19:03:32 +0200 Subject: Adding Fail2Ban monitoring / matrix message --- Fail2Ban/jail.local | 39 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 Fail2Ban/jail.local (limited to 'Fail2Ban/jail.local') diff --git a/Fail2Ban/jail.local b/Fail2Ban/jail.local new file mode 100644 index 0000000..774fa35 --- /dev/null +++ b/Fail2Ban/jail.local @@ -0,0 +1,39 @@ +# Sample jail.local config +[DEFAULT] + +ignoreip = 127.0.0.1/24 +bantime = 86400 +findtime = 300 +maxretry = 3 +banaction = iptables-multiport +backend = systemd +# Action to ban using IP tables and send matrix notification + + +# SSH jail +[sshd] + +enabled = true +port = 22 +logpath = /var/log/auth.log +backend = %(sshd_backend)s +filter = sshd + + +# Apache2 auth jail +[apache-auth] + +enabled = true +port = http,https +logpath = /var/log/apache2/error.log +filter = apache-auth +maxretry = 3 + +# Apache2 pass jail +[apache-pass] + +enabled = true +port = http,https +logpath = /var/log/apache2/access.log +filter = apache-pass +maxretry = 3 -- cgit v1.2.3