3,054
edits
Changes
Jump to navigation
Jump to search
mLine 29:
Line 29: − + + + + Line 45:
Line 48: − + + + Line 265:
Line 270: − + − you can add your custom rules by adding a filtername.local file in /etc/fail2ban/filters.d/+ − +
→Installation Koozali SME
{{#smeversion: smeserver-fail2ban}}
{{#smeversion: smeserver-fail2ban}}
== Installation Koozali SME v10==
== Installation Koozali SME==
<tabs container><tab name="For SME 10">
yum --enablerepo=smecontribs install smeserver-fail2ban
</tab><tab name="For SME 9">
* install the rpms
* install the rpms
db configuration setprop masq status enabled
db configuration setprop masq status enabled
signal-event post-upgrade; signal-event reboot
signal-event post-upgrade; signal-event reboot
{{warning box| Failing to run either of these command will completely lock network access next time iptables rules are reloaded}}
{{warning box| Failing to run either of these command will completely lock network access next time iptables rules are reloaded}}
{{warning box| The masq service must be enabled for fail2Ban to work correctly. If you disable it, Fail2ban won't ban anything}}
{{warning box| The masq service must be enabled for fail2Ban to work correctly. If you disable it, Fail2ban won't ban anything}}
</tab>
</tabs>
{{warning box| Starting SME10 and smeserver-fail2ban 0.1.18-29, manual change of configuration is included in core backup, if you use .local files in the folders action.d/ fail2ban.d/ filter.d/ jail.d/. Any change to rpm owned .conf file is not added in core backup. Use the .local files to override the conf file instead and it will be in the backup. See http://www.fail2ban.org/wiki/index.php/MANUAL_0_8#Configuration.}}
== Disable SME Feature AutoBlock SME 9 or greater ==
== Disable SME Feature AutoBlock SME 9 or greater ==
smeserver-sendmail[name="Recidive",dest=root]
smeserver-sendmail[name="Recidive",dest=root]
====custom local filters====
====Custom local filters====
You can add your custom rules by adding a filtername.local file in /etc/fail2ban/filters.d/
wget https://bugs.koozali.org/attachment.cgi?id=6229 -O /etc/fail2ban/filters.d/apache-badbots.local
wget https://bugs.koozali.org/attachment.cgi?id=6229 -O /etc/fail2ban/filters.d/apache-badbots.local
would be an example of local bad bots rules, be carreful to test for your personnal case. some advanced rules could create a lot of false positive and lock out your users.
would be an example of local bad bots rules, be careful to test for your personal case. Some advanced rules could create a lot of false positive and lock out your users.
== Uninstall ==
== Uninstall ==