Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
home_server:home_server_setup:other_services:fail2ban [2019-12-26 Thu wk52 11:30] – baumkphome_server:home_server_setup:other_services:fail2ban [2023-04-30 Sun wk17 17:43] (current) – external edit 127.0.0.1
Line 1: Line 1:
-sudo vim /etc/fail2ban/jail.local{{tag>fail2ban failtoban setup customise linux security}}+{{tag>fail2ban failtoban setup customise linux security}}
 =====Fail2Ban===== =====Fail2Ban=====
  
Line 11: Line 11:
     *''maxretry = 4''     *''maxretry = 4''
   *then adjust each jail to be activated:   *then adjust each jail to be activated:
-    *<code>+    *<code postfix>
 [postfix] [postfix]
 # To use another modes set filter parameter "mode" in jail.local: # To use another modes set filter parameter "mode" in jail.local:
Line 20: Line 20:
 logpath = %(postfix_log)s logpath = %(postfix_log)s
 backend = %(postfix_backend)s </code> backend = %(postfix_backend)s </code>
 +    *<code> 
 +[postfix-sasl] 
 +enabled  = true 
 +bantime  = 12h 
 +filter   = postfix[mode=auth] 
 +port     = smtp,465,submission,imap,imaps,pop3,pop3s 
 +# You might consider monitoring /var/log/mail.warn instead if you are 
 +# running postfix since it would provide the same log lines at the 
 +# "warn" level but overall at the smaller filesize. 
 +logpath  = %(postfix_log)s 
 +backend  = %(postfix_backend)s</code> 
 +  *''sudo systemctl restart fail2ban'' 
 +  *''sudo systemctl restart fail2ban'' or ''journalctl -u fail2ban -xe'' to check fail2ban start correctly 
 +  *''sudo iptables -S'' to check iptable 
  
 ---- ----
-===Home Server Index=== 
-++++Home Server Index|<pagelist&header> 
-*[[home_server:home_server_setup:summary]] 
-*[[home_server:home_server_setup:home_it_setup]] 
-*[[home_server:home_server_setup:Network_setup]] 
-*[[home_server:home_server_setup:kvm]] 
-*[[home_server:home_server_setup:vnc_setup]] 
-*[[home_server:home_server_setup:disk_check]] 
-*[[home_server:home_server_setup:other_services]] 
-</pagelist>++++ 
  
-===Home Server Other Index=== 
-++++Home Server Other Index|<pagelist&header> 
-*[[home_server:home_server_setup:other_services:index]] 
-*[[home_server:home_server_setup:other_services:timedate]] 
-*[[home_server:home_server_setup:other_services:aptcache]] 
-*[[home_server:home_server_setup:other_services:swap]] 
-*[[home_server:home_server_setup:other_services:bash]] 
-*[[home_server:home_server_setup:other_services:vim]] 
-*[[home_server:home_server_setup:other_services:symlinks]] 
-*[[home_server:home_server_setup:other_services:fail2ban]] 
-*[[home_server:home_server_setup:other_services:monit]] 
-*[[home_server:home_server_setup:other_services:tripwire]] 
-*[[home_server:home_server_setup:other_services:misc]] 
-</pagelist>++++ 
  
 <- home_server:home_server_setup:other_services:symlinks|Prev ^ home_server:home_server_setup:other_services:index|Start page ^ home_server:home_server_setup:other_services:monit|Next -> <- home_server:home_server_setup:other_services:symlinks|Prev ^ home_server:home_server_setup:other_services:index|Start page ^ home_server:home_server_setup:other_services:monit|Next ->