User Tools

Site Tools


computing:fail2ban

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revisionBoth sides next revision
computing:fail2ban [2019/11/03 04:28] oemb1905computing:fail2ban [2019/11/03 04:36] oemb1905
Line 21: Line 21:
   <action = %(action_mwl)s>   <action = %(action_mwl)s>
  
-If you attempt to log in via ssh and fail within any 4 hour period 4 different times, then you are immediately blocked.+If you attempt to log in via ssh and fail within any 4 hour period 4 different times, then you are immediately blocked for a week.
  
   [DEFAULT]   [DEFAULT]
Line 28: Line 28:
   maxretry = 4   maxretry = 4
  
-The recidive filter below states that the last 3 weeks will be reviewed and if the ip address in question was banned at least once already in that timeframe, then the stricter ban of 20 weeks takes effect.  If you plan to review 3 weeks of information, with up to three violations each for a week, then you probably need at least 21 days of data.  I rounded to 30 for slightly more granularity. +TheIf over the last 3 weeks the ip address in question was banned at least once, then the stricter ban of 20 weeks takes effect.  If you plan to review 3 weeks of information, with up to three violations each for a week, then you probably need at least 21 days of data.  I rounded to 30 for slightly more granularity. 
  
   [recidive]   [recidive]
computing/fail2ban.txt · Last modified: 2023/12/27 16:08 by oemb1905