@klistrod wrote:
How can I install a newer version? fail2ban-server-0.9.6
fail2ban-fpbx-0.8.14-11.sng7 no working in SNG7 14.0.1.3 (CentOS 7)
[root@freepbx ~]# fail2ban-client status Status |- Number of jail: 0 `- Jail list: [root@freepbx ~]#
/etc/fail2ban/jail.local
[DEFAULT] ignoreip = 127.0.0.1 bantime = 1800 findtime = 600 maxretry = 5 backend = auto [asterisk-iptables] enabled = true filter = asterisk-security action = iptables-allports[name=SIP, protocol=all] sendmail[name=SIP, dest=none@yourpbx.com, sender=none@yourpbx.com] logpath = /var/log/asterisk/fail2ban maxretry = 5 bantime = 1800 [pbx-gui] enabled = true filter = freepbx action = iptables-allports[name=PBX-GUI, protocol=all] sendmail[name=PBX-GUI, dest=none@yourpbx.com, sender=none@yourpbx.com] logpath = /var/log/asterisk/freepbx_security.log maxretry = 5 bantime = 1800 [ssh-iptables] enabled = true filter = sshd action = iptables[name=SSH, port=ssh, protocol=tcp] sendmail[name=SSH, dest=none@yourpbx.com, sender=none@yourpbx.com] logpath = /var/log/secure maxretry = 3 [apache-tcpwrapper] enabled = true filter = apache-auth action = iptables-allports[name=apache-auth, port=http, protocol=tcp] sendmail[name=apache-auth, dest=none@yourpbx.com, sender=none@yourpbx.com] logpath = /var/log/httpd/error_log maxretry = 3 [vsftpd-iptables] enabled = true filter = vsftpd action = iptables[name=FTP, port=ftp, protocol=tcp] sendmail[name=FTP, dest=none@yourpbx.com, sender=none@yourpbx.com] logpath = /var/log/vsftpd.log maxretry = 3 bantime = 1800 [apache-badbots] enabled = true filter = apache-badbots action = iptables-multiport[name=BadBots, port="http,https"] sendmail[name=BadBots, dest=none@yourpbx.com, sender=none@yourpbx.com] logpath = /var/log/httpd/*access_log bantime = 1800 maxretry = 1 # Jail for more extended banning of persistent abusers # !!! WARNING !!! # Make sure that your loglevel specified in fail2ban.conf/.local # is not at DEBUG level -- which might then cause fail2ban to fall into # an infinite loop constantly feeding itself with non-informative lines [recidive] enabled = true filter = recidive logpath = /var/log/fail2ban.log* action = iptables-allports[name=recidive, protocol=all] sendmail[name=recidive, dest=none@yourpbx.com, sender=none@yourpbx.com] bantime = 604800 ; 1 week findtime = 86400 ; 1 day maxretry = 20
Posts: 1
Participants: 1