This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
computing:fail2ban [2019/11/03 10:01] – oemb1905 | computing:fail2ban [2024/12/13 16:22] (current) – oemb1905 | ||
---|---|---|---|
Line 3: | Line 3: | ||
* **Jonathan Haack** | * **Jonathan Haack** | ||
* **Haack' | * **Haack' | ||
- | * **oemb1905@jonathanhaack.com** | + | * **oemb1905@jonathanhaack.com** |
------------------------------------------- | ------------------------------------------- | ||
Line 61: | Line 61: | ||
fail2ban-client set ssh unbanip 10.xx.15x.12x | fail2ban-client set ssh unbanip 10.xx.15x.12x | ||
+ | fail2ban-client unban --all | ||
- | --- //[[oemb1905@jonathanhaack.com|oemb1905]] | + | Another method that does more than individual services, and instead zaps all records: |
+ | |||
+ | sudo systemctl stop fail2ban | ||
+ | sudo truncate -s 0 / | ||
+ | sudo rm / | ||
+ | sudo systemctl restart fail2ban | ||
+ | |||
+ | Systemd log issues. Change the sshd jail as follows | ||
+ | |||
+ | sudo nano / | ||
+ | backend = systemd | ||
+ | #backend = %(sshd_backend)s | ||
+ | |||
+ | Some recommend adding backend = systemd into jail.conf, but I've found that does nothing. The error over ipv6 not being set and using auto can be removed as follows: | ||
+ | |||
+ | sudo nano / | ||
+ | ' | ||
+ | |||
+ | --- //[[alerts@haacksnetworking.org|oemb1905]] |