Fail2ban in FrontView

[thelinuxfr]

Hi,

fail2ban installed by default and manageable via the FrontView services with SSH, FTP, HTTP ...

Thx

[timvd]

+1 from me

[crumb]

hello

that's right fail2ban is really appreciate. I have few peoples all over the worlds who tried to connect to my Readynas ultra.
i can see then when i do a :
cat /var/log/auth.log | grep Failed



so, i tried to make a :
sudo apt-get install fail2ban

but i always have a problem when it tried to configure itself after the installation ... agreed to the log, there is a problem with python (python2.4 is required)
i have python 2.7 i installed in frontview from : http://readynasxtras.com/readynas-x86-add-ons/python-26-x86


so i tried to :
apt-get remove --purge fail2ban
apt-get autoremove
apt-get install fail2ban

but same problem again and again.



Finnaly it worked when i install fail2ban with the sources :

- Downladed http://sourceforge.net/projects/fail2ban/?source=dlp
- untar and cp in the new directory
- python setup.py install

and then, it worked !!!



so after that i had to configure fail2ban :
edit /etc/fail2ban/jail.local (which is a copy of the original jail.conf to preserve the original conf)
i turned

[ssh-iptables]
enabled  = true
port = ssh,22
...
logpath  = /var/log/auth.log
....


[proftpd-iptables]
enabled  = true
port     = ftp,sftp,"my specific port"
logpath  = /var/log/proftpd.log
.....

then made a
fail2ban-client reload
fail2ban-client status

which respond a :

Status
|- Number of jail:	2
`- Jail list:		proftpd-iptables, ssh-iptables

then i tried to connect to my readynas with a 3G smartphone, and failed 6 times to the password
>> my 3G IP was banned, and i automaticly received a mail which tell me which IP was BAN.

/var/log/fail2ban.log give me that :

2013-01-05 18:04:46,453 fail2ban.actions: WARNING [ssh-iptables] Ban 37.8.177.xx
2013-01-05 18:14:46,828 fail2ban.actions: WARNING [ssh-iptables] Unban 37.8.177.xx