[TriLUG] Automatic firewall rules based on probes?

[John Broome]

I found a tweak to use it for asterisk to baninate people trying to
brute-force extension passwords, worked awesomely.


On Wed, May 14, 2014 at 5:28 PM, Keith Woodie <kwoodie at gmail.com> wrote:

> If you want Apache banning, I believe you need to turn that on in the
> configuration file after install.  SSH may be the only "plugin" enabled by
> default.  The configuration file is documented well, so you should find all
> the features/options that your looking for.
>
>
>
> Keith Woodie
>
>
> On Wed, May 14, 2014 at 11:48 AM, Ric Moore <wayward4now at gmail.com> wrote:
>
> > On 05/14/2014 10:50 AM, Phillip Rhodes (Fogbeam Labs) wrote:
> >
> >> +1 for fail2ban.  I had a demo server that was being knocked offline
> >> periodically by brute-force ssh bots, and fail2ban fixed that.  It's
> easy
> >> to install/configure and works well in my experience.
> >>
> >
> > +2 fail2ban works a charm, and starts to work as soon as you install it.
> > Ric
> >
> > --
> > My father, Victor Moore (Vic) used to say:
> >
> > "There are two Great Sins in the world...
> >
> > ..the Sin of Ignorance, and the Sin of Stupidity.
> >
> > Only the former may be overcome." R.I.P. Dad.
> >
> > https://linuxcounter.net/cert/44256.png
> >
> > X-oldie-warning: Toothless but still vicious
> >
> >
> >
> > --
> > This message was sent to: Keith Woodie <kwoodie at gmail.com>
> > To unsubscribe, send a blank message to trilug-leave at trilug.org from
> that
> > address.
> > TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
> > Unsubscribe or edit options on the web  : http://www.trilug.org/mailman/
> > options/trilug/kwoodie%40gmail.com
> > Welcome to TriLUG: http://trilug.org/welcome
> >
> --
> This message was sent to: jbroome at gmail.com <jbroome at gmail.com>
> To unsubscribe, send a blank message to trilug-leave at trilug.org from that
> address.
> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
> Unsubscribe or edit options on the web  :
> http://www.trilug.org/mailman/options/trilug/jbroome%40gmail.com
> Welcome to TriLUG: http://trilug.org/welcome
>