Difference between revisions of "Fail2ban"

From Nuclear Physics Group Documentation Pages
Jump to navigationJump to search
Line 7: Line 7:
 
#*Install the rpm:<br/><code>rpm -ivh epel-release-<version>.noarch.rpm</code>
 
#*Install the rpm:<br/><code>rpm -ivh epel-release-<version>.noarch.rpm</code>
 
#Install fail2ban via yum: <br/><code>yum install fail2ban</code>
 
#Install fail2ban via yum: <br/><code>yum install fail2ban</code>
 +
 +
= Configuring =
  
 
= Unbanning =
 
= Unbanning =

Revision as of 15:23, 19 January 2012

This article contains instructions on installing and configuring fail2ban and also some useful tips for administering it.

Installing

  1. The fail2ban RPM is available from the EPEL package repository. Use the following instructions to make this package available to yum.
    • Download the EPEL repository install RPM:
      RHEL 5
      RHEL 6
    • Install the rpm:
      rpm -ivh epel-release-<version>.noarch.rpm
  2. Install fail2ban via yum:
    yum install fail2ban

Configuring

Unbanning

  1. Run iptables -L and find the ip address you want to unban. Note: the chain listed in iptables is not the jail the ip is contained. Check the fail2ban config if you don't know the jail name.
  2. Run the following commands as root.
fail2ban-client get <jailname> actionunban <ip address>
fail2ban-client reload