Package: fail2ban (0.11.2-2)

[ Source: fail2ban  ]

ban hosts that cause multiple authentication errors

Fail2ban monitors log files (e.g. /var/log/auth.log, /var/log/apache/access.log) and temporarily or persistently bans failure-prone addresses by updating existing firewall rules. Fail2ban allows easy specification of different actions to be taken such as to ban an IP using iptables or hostsdeny rules, or simply to send a notification email.

By default, it comes with filter expressions for various services (sshd, apache, proftpd, sasl, etc.) but configuration can be easily extended for monitoring any other text file. All filters and actions are given in the config files, thus fail2ban can be adopted to be used with a variety of files and firewalls. Following recommends are listed:

 - iptables/nftables -- default installation uses iptables for banning.
   nftables is also supported. You most probably need it
 - whois -- used by a number of *mail-whois* actions to send notification
   emails with whois information about attacker hosts. Unless you will use
   those you don't need whois
 - python3-pyinotify -- unless you monitor services logs via systemd, you
   need pyinotify for efficient monitoring for log files changes

Tags: System Administration: Automation and Scheduling, Logging, admin::monitoring, implemented-in::python, User Interface: Command Line, interface::daemon, network::firewall, Network Protocol: IP, Role: role::program, security::authentication, Security: Firewall, security::ids, security::log-analyzer, Purpose: Login, use::monitor, works-with-format::plaintext, Works with: System Logs, Text

Other Packages Related to fail2ban

• dep: lsb-base (>= 2.0-7)

  리눅스 표준 베이스 초기화 스크립트 기능

• dep: python3

  interactive high-level object-oriented language (default python3 version)

• rec: nftables

  Netfilter 프로젝트별로 패킷 필터링 룰 제어 프로그램

  or iptables

  패킷 필터링과 NAT를 위한 관리자 도구

• rec: python3-pyinotify

  simple Linux inotify Python bindings

• rec: python3-systemd

  Python 3 bindings for systemd

• rec: whois

  지능형 WHOIS 클라이언트

• sug: mailx

  virtual package provided by bsd-mailx, mailutils

• sug: monit

  utility for monitoring and managing daemons or similar programs

• sug: sqlite3

  Command line interface for SQLite 3

• sug: system-log-daemon

  virtual package provided by busybox-syslogd, inetutils-syslogd, rsyslog, socklog-run, syslog-ng-core

Download fail2ban

Download for all available architectures

Architecture	Package Size	Installed Size	Files
all	440.4 kB	2,092.0 kB	[list of files]