diff options
Diffstat (limited to 'straper/db/public/fail2ban/etc-fail2ban/jail.d')
5 files changed, 0 insertions, 37 deletions
diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/99-sshd.local b/straper/db/public/fail2ban/etc-fail2ban/jail.d/99-sshd.local deleted file mode 100644 index c8b55ce..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/99-sshd.local +++ /dev/null @@ -1,3 +0,0 @@ -[sshd] -enabled = true - diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/defaults-debian.conf b/straper/db/public/fail2ban/etc-fail2ban/jail.d/defaults-debian.conf deleted file mode 100644 index b060b72..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/defaults-debian.conf +++ /dev/null @@ -1,8 +0,0 @@ -[DEFAULT] -banaction = nftables -banaction_allports = nftables[type=allports] - -[sshd] -backend = systemd -journalmatch = _SYSTEMD_UNIT=ssh.service + _COMM=sshd -enabled = true diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd-session-preauth.local b/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd-session-preauth.local deleted file mode 100644 index a2b9f78..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd-session-preauth.local +++ /dev/null @@ -1,18 +0,0 @@ -[sshd-session-preauth] -enabled = true -backend = systemd -filter = sshd-session-preauth -# journal match: use the unit and/or the SYSLOG_IDENTIFIER seen in logs -journalmatch = _SYSTEMD_UNIT=ssh.service + SYSLOG_IDENTIFIER=sshd-session - -# Your SSH is on 57385; Fail2ban does not need it for matching, but does for actions: -port = 57385 -mode = aggressive - -# Thresholds (safe defaults; adjust later) -findtime = 10m -maxretry = 5 -bantime = 24h - -# nftables action (single-IP bans) -banaction = nftables diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local b/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local deleted file mode 100644 index c8b55ce..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local +++ /dev/null @@ -1,3 +0,0 @@ -[sshd] -enabled = true - diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local.bak b/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local.bak deleted file mode 100644 index d37ee98..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local.bak +++ /dev/null @@ -1,5 +0,0 @@ -[sshd] -enabled = true -backend = systemd -filter = sshd-session-preauth -action = nftables-multiport |