Fail2ban: Difference between revisions

From Han Wiki
Jump to navigation Jump to search
mNo edit summary
mNo edit summary
 
Line 4: Line 4:


<code>/etc/fail2ban/filter.d/httpd-ban.conf</code>:
<code>/etc/fail2ban/filter.d/httpd-ban.conf</code>:
<syntaxhighlight lang="conf">
<syntaxhighlight lang="linux-config">
[Definition]
[Definition]
failregex = ^<HOST> .*
failregex = ^<HOST> .*
Line 12: Line 12:


<code>/etc/fail2ban/jail.d/cutomisation.local</code>:
<code>/etc/fail2ban/jail.d/cutomisation.local</code>:
<syntaxhighlight lang="conf">
<syntaxhighlight lang="linux-config">
[httpd]
[httpd]
enabled = true
enabled = true

Latest revision as of 08:16, 19 September 2024

Create a new jail named httpd

/etc/fail2ban/filter.d/httpd-ban.conf:

[Definition]
failregex = ^<HOST> .*
ignoreregex =


/etc/fail2ban/jail.d/cutomisation.local:

[httpd]
enabled = true
filter = httpd-ban
port = http,https
logpath = %(nginx_error_log)s


Ban an IP from accessing any of the websites

$ sudo fail2ban-client set httpd banip 81.19.140.244