From 249b9d74a6be8c3157035fe46a0380d7205a6298 Mon Sep 17 00:00:00 2001 From: FusionPBX Date: Sat, 28 May 2016 13:01:48 -0600 Subject: [PATCH] Update jail.local Set the fail2ban to block only web interface for failed authentication attempts. --- debian/resources/fail2ban/jail.local | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/debian/resources/fail2ban/jail.local b/debian/resources/fail2ban/jail.local index 0677859..5fd45b2 100644 --- a/debian/resources/fail2ban/jail.local +++ b/debian/resources/fail2ban/jail.local @@ -38,9 +38,9 @@ port = 80,443 protocol = tcp filter = fusionpbx logpath = /var/log/auth.log -action = iptables-allports[name=fusionpbx, protocol=all] +action = iptables-multiport[name=fusionpbx, port="http,https", protocol=tcp] # sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed -maxretry = 5 +maxretry = 10 findtime = 600 bantime = 600