From 83f7fe4b8402bab171d110703a1b1115efbc9b28 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Tue, 14 Apr 2026 22:32:43 +0200 Subject: cleaned up many scrits and deleted some that were of no use; renamed a lot --- .../public/fail2ban/etc-fail2ban/jail.d/99-sshd.local | 3 --- .../fail2ban/etc-fail2ban/jail.d/defaults-debian.conf | 8 -------- .../etc-fail2ban/jail.d/sshd-session-preauth.local | 18 ------------------ .../db/public/fail2ban/etc-fail2ban/jail.d/sshd.local | 3 --- .../public/fail2ban/etc-fail2ban/jail.d/sshd.local.bak | 5 ----- 5 files changed, 37 deletions(-) delete mode 100644 straper/db/public/fail2ban/etc-fail2ban/jail.d/99-sshd.local delete mode 100644 straper/db/public/fail2ban/etc-fail2ban/jail.d/defaults-debian.conf delete mode 100644 straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd-session-preauth.local delete mode 100644 straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local delete mode 100644 straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local.bak (limited to 'straper/db/public/fail2ban/etc-fail2ban/jail.d') diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/99-sshd.local b/straper/db/public/fail2ban/etc-fail2ban/jail.d/99-sshd.local deleted file mode 100644 index c8b55ce..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/99-sshd.local +++ /dev/null @@ -1,3 +0,0 @@ -[sshd] -enabled = true - diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/defaults-debian.conf b/straper/db/public/fail2ban/etc-fail2ban/jail.d/defaults-debian.conf deleted file mode 100644 index b060b72..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/defaults-debian.conf +++ /dev/null @@ -1,8 +0,0 @@ -[DEFAULT] -banaction = nftables -banaction_allports = nftables[type=allports] - -[sshd] -backend = systemd -journalmatch = _SYSTEMD_UNIT=ssh.service + _COMM=sshd -enabled = true diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd-session-preauth.local b/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd-session-preauth.local deleted file mode 100644 index a2b9f78..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd-session-preauth.local +++ /dev/null @@ -1,18 +0,0 @@ -[sshd-session-preauth] -enabled = true -backend = systemd -filter = sshd-session-preauth -# journal match: use the unit and/or the SYSLOG_IDENTIFIER seen in logs -journalmatch = _SYSTEMD_UNIT=ssh.service + SYSLOG_IDENTIFIER=sshd-session - -# Your SSH is on 57385; Fail2ban does not need it for matching, but does for actions: -port = 57385 -mode = aggressive - -# Thresholds (safe defaults; adjust later) -findtime = 10m -maxretry = 5 -bantime = 24h - -# nftables action (single-IP bans) -banaction = nftables diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local b/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local deleted file mode 100644 index c8b55ce..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local +++ /dev/null @@ -1,3 +0,0 @@ -[sshd] -enabled = true - diff --git a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local.bak b/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local.bak deleted file mode 100644 index d37ee98..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/jail.d/sshd.local.bak +++ /dev/null @@ -1,5 +0,0 @@ -[sshd] -enabled = true -backend = systemd -filter = sshd-session-preauth -action = nftables-multiport -- cgit v1.3