diff options
| author |   Andrew Opalach <andrew@akon.city>
| 2024-11-12 22:26:02 -0500 |
|---|---|---|
| committer | Andrew Opalach <andrew@akon.city>
| 2024-11-12 22:36:49 -0500 |
| commit | 53a0a5473f45d37027af9663638adbf56667e4ca (patch) | |
| tree | 05c6c39678a9005f95c00e0fdf31193657bd4d3d /hosts/rod/fail2ban | |
| download | dotfiles-53a0a5473f45d37027af9663638adbf56667e4ca.tar.gz dotfiles-53a0a5473f45d37027af9663638adbf56667e4ca.tar.bz2 dotfiles-53a0a5473f45d37027af9663638adbf56667e4ca.zip | |
Hopefully no leaks
Diffstat (limited to 'hosts/rod/fail2ban')
| -rw-r--r-- | hosts/rod/fail2ban/fail2ban.d/rod.local | 2 | ||||
| -rw-r--r-- | hosts/rod/fail2ban/jail.d/rod.local | 15 |
2 files changed, 17 insertions, 0 deletions
diff --git a/hosts/rod/fail2ban/fail2ban.d/rod.local b/hosts/rod/fail2ban/fail2ban.d/rod.local new file mode 100644 index 0000000..b3d98c4 --- /dev/null +++ b/hosts/rod/fail2ban/fail2ban.d/rod.local @@ -0,0 +1,2 @@ +[DEFAULT] +allowipv6 = true diff --git a/hosts/rod/fail2ban/jail.d/rod.local b/hosts/rod/fail2ban/jail.d/rod.local new file mode 100644 index 0000000..c8c0916 --- /dev/null +++ b/hosts/rod/fail2ban/jail.d/rod.local @@ -0,0 +1,15 @@ +[DEFAULT] +chain = input +maxretry = 3 +findtime = 60m +bantime = 24h +backend = systemd +logtarget = SYSTEMD-JOURNAL +banaction = nftables-multiport +banaction_allports = nftables-allports + +[sshd] +enabled = true +port = 1738 +mode = aggressive +journalmatch=_SYSTEMD_UNIT=ssh.service |