Search results

Hi UFHH01, the problem persist if I use this action with Fail2Ban. Can you suggest something to try ? Thank you

So, if I change Fail2Ban to use ipset (and not iptables) can I further reduce this latency ?

If your customers have a staatic ip, you can put their IP in "trusted IP address" under Fail2Ban section on plesk

I've tried to use command line to create a test ipset and it works : ipset -v ipset v6.29, protocol version: 6 [root@server action.d]# ipset create f2b-iptest hash:ip timeout 3600 [root@server action.d]# ipset list Name: f2b-iptest Type: hash:ip Revision: 1 Header: family inet hashsize 1024...

Hi UFHH01, I'm in the same situation: f2bmng failed: ERROR Found no accessible config files for 'action.d/iptables-ipset-proto6-allports.conf' under /etc/fail2ban :( Edit : now it works. I've remove extension (.conf) from the action line and no errors are showed. Now I'm testing it. Edit 2: It...

Hi UFHH01, this is my situation So, my question is: why should I mod permissions ? Isn't them already ok ?

this is my error f2bmng failed: ERROR Found no accessible config files for 'action.d/iptables-ipset-proto6-allports.conf' under /etc/fail2ban ERROR Error in action definition iptables-ipset-proto6-allports.conf[name="postfix-rbl", port="smtp,smtps,submission"] ERROR Errors in jail...

I have tried these two entry in jail.local (one at time), but without success : [postfix-rbl] enabled = true filter = postfix-rbl action = iptables-ipset-proto6-allports.conf[name="postfix-rbl", port="smtp,smtps,submission"] iptables-ipset-proto4.conf[name="postfix-rbl"...

Hi UFHH01, these are the output : ls -lah /etc/fail2ban/action.d/ | grep iptables -rw-r----- 1 root root 1.5K Mar 14 2017 iptables-allports.conf -rw-r----- 1 root root 1.9K Mar 14 2017 iptables-common.conf -rw-r----- 1 root root 1.4K Sep 11 11:21 iptables.conf -rw-r----- 1 root root 1.8K Sep...

Hi mr-wolf, it came from br. I'll try ipset-country script, but first I'm tring to configure f2b to use ipset (and not iptables). Then I'll configure your script to work with f2b. Thank you for your support.

Hi UFHH01, I have iptables-ipset-proto* files in action.d directory. So I don't understand it. Why cannot f2bmng found it ?

Hi, I know this is an old thread, but since 2014 no f2bmng is been modify. I'm tring to use ipset on f2b, but without success. I've the same error : Error: f2bmng failed: ERROR Found no accessible config files for 'action.d/iptables-ipset-proto6.conf' under /etc/fail2ban ERROR Error in action...

Hi mr-wolf, I have had a bruteforce attack (Question - Brute force attack has put down dovecot service) and I've found some scripts for f2b for nginx (www), but nothing for pop3,pop3s. Do you think that I can protect my dovecot service with bruteprotect from your ssh script ?

Hi, I've received some email from watchdog that inform me that dovecot service is down for about 10 minutes, and then it is been restarted. So, I've read some log and I found that from an only ip, my server has received a series of attempts to access on dovecot. Now, I would like to know why my...

Hi mr-wolf, for now I want to set, only black-countries, so I think that the white control I can leave empty...Is it's ok, how can I add "this line after "-A INPUT -p tcp -m tcp --dport 22 -j f2b-SSH" ? I have create the script and the conf file on /usr/local/sbin, but I cannot understand how...

Thanks UFHH01. But if I have understood, this solution redirect all domains even if there isn't any certificate. So, this is the problem: what can I do when I have a domain without ssl support ?

I've read this discussion, but I didn't find any info about horde webmail. Where can I force https for those domains that have a SSL certificate ? Thank you

this is the output :f2b-SSH - [0:0] -A INPUT -p tcp -m tcp --dport 22 -j f2b-SSH -A f2b-SSH -s 103.89.88.130/32 -j REJECT --reject-with icmp-port-unreachable -A f2b-SSH -j RETURN ..yes...we're wolf...;)

Hi, I've implemented fail2sql with success (thanks to this thread), but I've found that in my DB are logged only ssh port. That's strange because I've some ftp nad postfix in my fail2ban log but no one are write in the db. Why ?

hi mr-wolf, I'm tring to implent some country block rules, and I have a question about your example; my iptables look like this : 13 f2b-SSH tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 Can I implement ipset even if I have Fail2Ban to check my ssh ? Thank you