Fail2Ban: Any thoughts positive or negative on installing this?

Started by PsyberTech, December 10, 2014, 12:18:38 AM

Previous topic - Next topic

PsyberTech

I have been told that for some of my security options, I should install Fail2Ban on my CWP/Centos 6.6 servers.

Any thoughts or recommendations before I start to tinker with it?

Many thanks!

Administrator

you should enable CSF firewall on your server and then you do not need this 3rdparty.

Media Schmiede

How Protect Firewall failed logins on http://my.hostname.tld:2030/ and ssh without bind to an fixed ip?
For me not possile cause our local ip change daily.

martexx

First of all fail2ban is not needed if u use csf+lfd, but ... lfd needs a lot of work to filter as much as fail2ban does.

For example Roundcude... very often a target for hackers/kiddies and not dealth with by LFD

So yes.. its a good idea to use fail2ban for things that LFD does not cover. or configure LFD to cover those via regex-custom.pm
Im developing a toll to automate this as its very gard, where for fail2ban its rather easy

Then @Media Schmiede

U are safe, it does not matter that u use a changing ip address.