Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 19th February 2009, 19:23
BorderAmigos BorderAmigos is offline
Senior Member
 
Join Date: Apr 2008
Location: San Diego & Tijuana
Posts: 302
Thanks: 26
Thanked 33 Times in 31 Posts
Send a message via MSN to BorderAmigos Send a message via Yahoo to BorderAmigos
Default Configure fail2ban for specific hack attempts?

Can fail2ban be configured to ban a hacker or bot on the first attempt at known files or directories?

For example: I do not have RoundCube installed on my Debian Lenny server. There are a lot of attempts to access RoundCube in the Apache error logs. Can I configure fail2ban to ban on the first attempt to access RoundCube so they don't go thru all the other searches for weak points?

(If so, I would then add similar bans for all the other exploits du jour).
__________________
System6Hosting.com, ISPConfig 3, Debian.
Reply With Quote
Sponsored Links
  #2  
Old 20th February 2009, 18:20
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,722 Times in 2,563 Posts
 
Default

Yes, that should be possible as long as you use the correct regex in your fail2ban configuration.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Fail2Ban not banning? tristanlee85 Server Operation 4 15th October 2008 13:44
Error compile Courier-Authlib pcom11 Server Operation 1 29th September 2007 12:15
Configure fail2ban for FC7 tristanlee85 Server Operation 1 23rd August 2007 18:44
mail hack attempts fordwrench General 12 6th August 2007 17:12
Hack attempts Andee63 General 12 29th March 2007 19:33


All times are GMT +2. The time now is 07:23.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.