hi marco,
i finally got this sorted. i thought fail2ban was configured in /etc/fail2ban/fail2ban.conf and i never looked at /etc/fail2ban/jail.conf
i edited /etc/fail2ban/jail.conf and enabled ssh. also updated the ssh log to
/var/log/secure
it was sshd.log (or something similar)
ssh was my main concern, but i'll try and enable http auth and some others as well.
restarted fail2ban and tested this out. fail2ban works fine now, bans IPs, and ispconfig shows me the log via the control panel.
thanks to everyone for helping me with this!
|
Recent comments
7 hours 44 min ago
12 hours 49 min ago
17 hours 13 min ago
19 hours 2 min ago
1 day 9 hours ago
1 day 9 hours ago
1 day 14 hours ago
1 day 20 hours ago
1 day 21 hours ago
1 day 23 hours ago