User Tools

Site Tools


computing:fail2ban

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
computing:fail2ban [2023/06/01 17:25] oemb1905computing:fail2ban [2023/12/27 16:08] (current) oemb1905
Line 63: Line 63:
   fail2ban-client unban --all   fail2ban-client unban --all
  
-Another method that does more than individual services:+Another method that does more than individual services, and instead zaps all records:
  
   sudo systemctl stop fail2ban   sudo systemctl stop fail2ban
   sudo truncate -s 0 /var/log/fail2ban.log   sudo truncate -s 0 /var/log/fail2ban.log
   sudo rm /var/lib/fail2ban/fail2ban.sqlite3   sudo rm /var/lib/fail2ban/fail2ban.sqlite3
-  sudo service fail2ban restart+  sudo systemctl restart fail2ban
  
- --- //[[jonathan@haacksnetworking.org|oemb1905]] 2022/09/04 09:22//+Systemd log issues. Change the sshd jail as follows 
 + 
 +  sudo nano /etc/fail2ban/jail.local 
 +  backend = systemd 
 +  #backend = %(sshd_backend)s 
 +   
 +Some recommend adding backend = systemd into jail.conf, but I've found that does nothing. The error over ipv6 not being set and using auto can be removed as follows: 
 +   
 +  sudo nano /etc/fail2ban/fail2ban.conf 
 +  'allowipv6 = auto' 
 + 
 + --- //[[jonathan@haacksnetworking.org|oemb1905]] 2023/12/27 16:01//
computing/fail2ban.1685640310.txt.gz · Last modified: 2023/06/01 17:25 by oemb1905