diff options
| author | Denis Chevalier <perso@denischevalier.fr> | 2026-08-06 13:32:38 +0200 |
|---|---|---|
| committer | Denis Chevalier <perso@denischevalier.fr> | 2026-08-06 13:32:38 +0200 |
| commit | 257a7d8b05bf081ea338132012861cf4d196fee1 (patch) | |
| tree | 062423c4691f1f3e2a99b172336a97185bae29ec /etc/fail2ban/jail.d | |
| parent | 66f65ef6bc5692071805a928213c776a44c81bf7 (diff) | |
| download | postinstall-257a7d8b05bf081ea338132012861cf4d196fee1.tar.gz postinstall-257a7d8b05bf081ea338132012861cf4d196fee1.tar.bz2 postinstall-257a7d8b05bf081ea338132012861cf4d196fee1.zip | |
fix fail2ban config
Diffstat (limited to 'etc/fail2ban/jail.d')
| -rw-r--r-- | etc/fail2ban/jail.d/sshd.conf | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/etc/fail2ban/jail.d/sshd.conf b/etc/fail2ban/jail.d/sshd.conf new file mode 100644 index 0000000..35a73c7 --- /dev/null +++ b/etc/fail2ban/jail.d/sshd.conf @@ -0,0 +1,19 @@ +[DEFAULT] +# Use UFW to execute IP bans +banaction = ufw + +# Read logs directly from systemd journal (required for Arch Linux) +backend = systemd + +# Ignore local traffic +ignoreip = 127.0.0.1/8 ::1 192.168.1.0/24 + +# Ban parameters +findtime = 10m +maxretry = 4 +bantime = 1h + +[sshd] +enabled = true +port = 39901 +mode = normal |