I am following this how-to to install fail2ban on debian ecth.
http://www.howtoforge.com/fail2ban_debian_etch but modified it to work on CentOS.
It is working:
[root@webserver action.d]# fail2ban-client status ssh
Status for the jail: ssh
|- filter
| |- Currently failed: 0
| `- Total failed: 11
`- action
|- Currently banned: 0
| `- IP list:
`- Total banned: 3
My question is that there appears to be some type of email configuration that if a user gets banned it sends an email to the attacker. I don't know if i have that working or how that is configured.
the file /etc/fail2ban/action.d/mail.conf
Recent comments
21 hours 28 min ago
1 day 2 hours ago
1 day 3 hours ago
1 day 4 hours ago
1 day 6 hours ago
1 day 10 hours ago
1 day 11 hours ago
1 day 13 hours ago
2 days 3 hours ago
2 days 4 hours ago