HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   HOWTO-Related Questions (http://www.howtoforge.com/forums/forumdisplay.php?f=2)
-   -   Fail2ban Config Questions (http://www.howtoforge.com/forums/showthread.php?t=22854)

batescr 30th April 2008 16:10

Fail2ban Config Questions
 
1 Attachment(s)
I am following this how-to to install fail2ban on debian ecth.
http://www.howtoforge.com/fail2ban_debian_etch but modified it to work on CentOS.

It is working:

[root@webserver action.d]# fail2ban-client status ssh
Status for the jail: ssh
|- filter
| |- Currently failed: 0
| `- Total failed: 11
`- action
|- Currently banned: 0
| `- IP list:
`- Total banned: 3

My question is that there appears to be some type of email configuration that if a user gets banned it sends an email to the attacker. I don't know if i have that working or how that is configured.

the file /etc/fail2ban/action.d/mail.conf

falko 1st May 2008 20:28

Looks ok, but you have actionstart and actionend twice in that file. Comment out one actionstart and one actionend directive.

batescr 1st May 2008 21:09

The two actionstart and actionend was due to me cutting and pasting. I only have one of each. How can i test that the emails are getting sent?

falko 2nd May 2008 15:23

You could try to break in to your server (but please use a dynamic IP address for this...).


All times are GMT +2. The time now is 16:08.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.