diff options
| author | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
|---|---|---|
| committer | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
| commit | 83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch) | |
| tree | 19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/fail2ban/etc-fail2ban/jail.d | |
| parent | 51d43498b07dc97d795947964534f0903cd05db5 (diff) | |
| download | bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip | |
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/fail2ban/etc-fail2ban/jail.d')
5 files changed, 0 insertions, 37 deletions
diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/99-sshd.local b/straper/db/public/fail2ban/etc-fail2ban/jail.d/99-sshd.local deleted file mode 100644 index c8b55ce..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/99-sshd.local +++ /dev/null @@ -1,3 +0,0 @@ -[sshd] -enabled = true - diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/defaults-debian.conf b/straper/db/public/fail2ban/etc-fail2ban/jail.d/defaults-debian.conf deleted file mode 100644 index b060b72..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/defaults-debian.conf +++ /dev/null @@ -1,8 +0,0 @@ -[DEFAULT] -banaction = nftables -banaction_allports = nftables[type=allports] - -[sshd] -backend = systemd -journalmatch = _SYSTEMD_UNIT=ssh.service + _COMM=sshd -enabled = true diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd-session-preauth.local b/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd-session-preauth.local deleted file mode 100644 index a2b9f78..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd-session-preauth.local +++ /dev/null @@ -1,18 +0,0 @@ -[sshd-session-preauth] -enabled = true -backend = systemd -filter = sshd-session-preauth -# journal match: use the unit and/or the SYSLOG_IDENTIFIER seen in logs -journalmatch = _SYSTEMD_UNIT=ssh.service + SYSLOG_IDENTIFIER=sshd-session - -# Your SSH is on 57385; Fail2ban does not need it for matching, but does for actions: -port = 57385 -mode = aggressive - -# Thresholds (safe defaults; adjust later) -findtime = 10m -maxretry = 5 -bantime = 24h - -# nftables action (single-IP bans) -banaction = nftables diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local b/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local deleted file mode 100644 index c8b55ce..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local +++ /dev/null @@ -1,3 +0,0 @@ -[sshd] -enabled = true - diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local.bak b/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local.bak deleted file mode 100644 index d37ee98..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local.bak +++ /dev/null @@ -1,5 +0,0 @@ -[sshd] -enabled = true -backend = systemd -filter = sshd-session-preauth -action = nftables-multiport |