Update jail.local
Set the fail2ban to block only web interface for failed authentication attempts.
This commit is contained in:
parent
209a2f8343
commit
249b9d74a6
|
|
@ -38,9 +38,9 @@ port = 80,443
|
||||||
protocol = tcp
|
protocol = tcp
|
||||||
filter = fusionpbx
|
filter = fusionpbx
|
||||||
logpath = /var/log/auth.log
|
logpath = /var/log/auth.log
|
||||||
action = iptables-allports[name=fusionpbx, protocol=all]
|
action = iptables-multiport[name=fusionpbx, port="http,https", protocol=tcp]
|
||||||
# sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed
|
# sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed
|
||||||
maxretry = 5
|
maxretry = 10
|
||||||
findtime = 600
|
findtime = 600
|
||||||
bantime = 600
|
bantime = 600
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue