Search results

Hi mr-wolf, so you suggest to enable plesk firewall or load a firewall like you ?

So, what you can suggest to have a "realtime" protection ? Set a number of login attempts per minute ?

Hi, I'm on CentOs 7.3 and there isn't iptables under sysconfig but ip6tables-config and iptables-config. This is the output of command # Generated by iptables-save v1.4.21 on Wed Sep 27 10:10:51 2017 *filter :INPUT ACCEPT [13:1196] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [6:540] :f2b-BadBots -...

Hi UFHH01, the problem persist if I use this action with Fail2Ban. Can you suggest something to try ? Thank you

So, if I change Fail2Ban to use ipset (and not iptables) can I further reduce this latency ?

If your customers have a staatic ip, you can put their IP in "trusted IP address" under Fail2Ban section on plesk

I've tried to use command line to create a test ipset and it works : ipset -v ipset v6.29, protocol version: 6 [root@server action.d]# ipset create f2b-iptest hash:ip timeout 3600 [root@server action.d]# ipset list Name: f2b-iptest Type: hash:ip Revision: 1 Header: family inet hashsize 1024...

Hi UFHH01, I'm in the same situation: f2bmng failed: ERROR Found no accessible config files for 'action.d/iptables-ipset-proto6-allports.conf' under /etc/fail2ban :( Edit : now it works. I've remove extension (.conf) from the action line and no errors are showed. Now I'm testing it. Edit 2: It...

Hi UFHH01, this is my situation So, my question is: why should I mod permissions ? Isn't them already ok ?

this is my error f2bmng failed: ERROR Found no accessible config files for 'action.d/iptables-ipset-proto6-allports.conf' under /etc/fail2ban ERROR Error in action definition iptables-ipset-proto6-allports.conf[name="postfix-rbl", port="smtp,smtps,submission"] ERROR Errors in jail...

I have tried these two entry in jail.local (one at time), but without success : [postfix-rbl] enabled = true filter = postfix-rbl action = iptables-ipset-proto6-allports.conf[name="postfix-rbl", port="smtp,smtps,submission"] iptables-ipset-proto4.conf[name="postfix-rbl"...

Hi UFHH01, these are the output : ls -lah /etc/fail2ban/action.d/ | grep iptables -rw-r----- 1 root root 1.5K Mar 14 2017 iptables-allports.conf -rw-r----- 1 root root 1.9K Mar 14 2017 iptables-common.conf -rw-r----- 1 root root 1.4K Sep 11 11:21 iptables.conf -rw-r----- 1 root root 1.8K Sep...

Hi mr-wolf, it came from br. I'll try ipset-country script, but first I'm tring to configure f2b to use ipset (and not iptables). Then I'll configure your script to work with f2b. Thank you for your support.

Hi UFHH01, I have iptables-ipset-proto* files in action.d directory. So I don't understand it. Why cannot f2bmng found it ?

Hi, I know this is an old thread, but since 2014 no f2bmng is been modify. I'm tring to use ipset on f2b, but without success. I've the same error : Error: f2bmng failed: ERROR Found no accessible config files for 'action.d/iptables-ipset-proto6.conf' under /etc/fail2ban ERROR Error in action...

Hi mr-wolf, I have had a bruteforce attack (Question - Brute force attack has put down dovecot service) and I've found some scripts for f2b for nginx (www), but nothing for pop3,pop3s. Do you think that I can protect my dovecot service with bruteprotect from your ssh script ?

Hi, I've received some email from watchdog that inform me that dovecot service is down for about 10 minutes, and then it is been restarted. So, I've read some log and I found that from an only ip, my server has received a series of attempts to access on dovecot. Now, I would like to know why my...

Hi mr-wolf, for now I want to set, only black-countries, so I think that the white control I can leave empty...Is it's ok, how can I add "this line after "-A INPUT -p tcp -m tcp --dport 22 -j f2b-SSH" ? I have create the script and the conf file on /usr/local/sbin, but I cannot understand how...

Thanks UFHH01. But if I have understood, this solution redirect all domains even if there isn't any certificate. So, this is the problem: what can I do when I have a domain without ssl support ?

I've read this discussion, but I didn't find any info about horde webmail. Where can I force https for those domains that have a SSL certificate ? Thank you