Misc server configuration (pure-ftpd, ldap etc)

Discussion in 'Server Operation' started by Karel, Jun 21, 2007.

  1. Karel

    Karel New Member


    I have two questions about server configuration.

    • Is there a way to make pure-ftpd wait for several seconds before telling the client that it failed to login (to simply prevent brute force attacks)? And to increase this time in sshd?
    • Is there any reason to NOT use (open)ldap for web based applications login (trac, phpbb, etc) - and should I use something else instead of it to have a single database of all users and their logins?

    Thank you for any answers and suggestions.
    Last edited: Jun 21, 2007
  2. falko

    falko Super Moderator ISPConfig Developer

  3. Karel

    Karel New Member

    Not for pureftd, it doesn't seem to log login failures to a separate directory...
  4. falko

    falko Super Moderator ISPConfig Developer

    It's enough if it logs anywhere (if it logs, it can be used by fail2ban).
  5. jusnetworx

    jusnetworx New Member

    I too, am using pureftpd. I have some other daemons I would like to monitor. Does anyone have a How To for monitoring services that are not listed in the tutorial (MySQL, Pure-FTPD, etc..)?
    Last edited: Jul 2, 2007
  6. falko

    falko Super Moderator ISPConfig Developer

    You have to find out to which log files the services log failed authentication tries. Then adjust /etc/fail2ban/jail.local and restart fail2ban.

Share This Page