[TriLUG] Automatic firewall rules based on probes?

[Keith Woodie]

If you want Apache banning, I believe you need to turn that on in the
configuration file after install.  SSH may be the only "plugin" enabled by
default.  The configuration file is documented well, so you should find all
the features/options that your looking for.



Keith Woodie


On Wed, May 14, 2014 at 11:48 AM, Ric Moore <wayward4now at gmail.com> wrote:

> On 05/14/2014 10:50 AM, Phillip Rhodes (Fogbeam Labs) wrote:
>
>> +1 for fail2ban.  I had a demo server that was being knocked offline
>> periodically by brute-force ssh bots, and fail2ban fixed that.  It's easy
>> to install/configure and works well in my experience.
>>
>
> +2 fail2ban works a charm, and starts to work as soon as you install it.
> Ric
>
> --
> My father, Victor Moore (Vic) used to say:
>
> "There are two Great Sins in the world...
>
> ..the Sin of Ignorance, and the Sin of Stupidity.
>
> Only the former may be overcome." R.I.P. Dad.
>
> https://linuxcounter.net/cert/44256.png
>
> X-oldie-warning: Toothless but still vicious
>
>
>
> --
> This message was sent to: Keith Woodie <kwoodie at gmail.com>
> To unsubscribe, send a blank message to trilug-leave at trilug.org from that
> address.
> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
> Unsubscribe or edit options on the web  : http://www.trilug.org/mailman/
> options/trilug/kwoodie%40gmail.com
> Welcome to TriLUG: http://trilug.org/welcome
>