Re: [Users] CentOS 7 image, ModSecurity and Fail2Ban?

2016-06-03 Thread Jeffrey Walton
> In brief: > * OpenVZ 6 (2.6.32-x kernels) does not allow to use ipset inside Containers > (it's just not virtualized) > * OpenVZ 7 (3.10.0-x kernels) does have ipset virtualized => it works inside > Containers. > > If you try fail2ban in OpenVZ 7, please post here the results. :) > > Hope that

Re: [Users] CentOS 7 image, ModSecurity and Fail2Ban?

2016-06-03 Thread Scott Dowdle
Greetings, - Original Message - > Are there any recommendations for fail2ban-like functionality in the > down-level kernel? Perhaps another package I am not aware of? Well, I'm ignorant about parsing web logs and taking action so your particular question / use case I'm not familiar

Re: [Users] CentOS 7 image, ModSecurity and Fail2Ban?

2016-06-03 Thread Narcis Garcia
I use some fail2ban for brute force ssh attacks in OpenVZ/6 with no problem, but running only one instance on HardwareNode and parsing containers' logs. El 03/06/16 a les 20:46, Jeffrey Walton ha escrit: >> In brief: >> * OpenVZ 6 (2.6.32-x kernels) does not allow to use ipset inside Containers

Re: [Users] CentOS 7 image, ModSecurity and Fail2Ban?

2016-06-03 Thread Konstantin Khorenko
Hi Jeff, Scott, we did not check if fail2ban works, but if fail2ban uses ipset, following info can be useful for you: https://bugs.openvz.org/browse/OVZ-5736 In brief: * OpenVZ 6 (2.6.32-x kernels) does not allow to use ipset inside Containers (it's just not virtualized) * OpenVZ 7 (3.10.0-x

Re: [Users] CentOS 7 image, ModSecurity and Fail2Ban?

2016-06-01 Thread Scott Dowdle
Greetings, - Original Message - > Has anyone experienced any problems with OpenVZ, CentOS 7 and > fail2ban? I haven't done a lot with firewalls inside of containers... although I have started using firewalld lately on a few EL7 containers and it seems to work just fine even with live

[Users] CentOS 7 image, ModSecurity and Fail2Ban?

2016-06-01 Thread Jeffrey Walton
Hi Everyone, I'd like to install fail2ban to stop the unfettered: script '/var/www/html/wp-login.php' not found or unable to stat ... I'm OK with a fail2ban config, but I don't know about the OpenVZ container, CnetOS and other negative interatctions that may cause me to lose access to