Oops, I did not see that there were still more posts. :-)
Wayne Sallee
wa...@waynesallee.com
http://www.WayneSallee.com
Original Message
*Subject: * Re: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
*From: * Wayne Sallee
*To: * Fail2ban-users
*CC: *
*Date
Did your restart, or reload fail2ban, after making changes to the cofig file?
fail2ban-client reload
Wayne Sallee
wa...@waynesallee.com
http://www.WayneSallee.com
Original Message
*Subject: * Re: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
*From: * Henrique
>
> Hi Dominic,
>
> ^ means that the client IP must be first on the log line, this is not
> the case in your log.
>
> Edit the regex so the is last in the regex.
>
> Regards,
>
> Dudi
>
> From: Dominic Raferd [mailto:domi...@tim
y 15, 2020 16:39
To: Henrique Fagundes
Cc: Dudi Goldenberg ; Fail2ban Users
Subject: Re: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
LogPath:
[phpmyadmin]
enabled = true
port = http,https
filter = phpmyadmin
action = iptables-multiport[name=phpmyadmin, port="http,https
: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
On Sat, 15 Feb 2020 at 01:54, Henrique Fagundes
mailto:supo...@aprendendolinux.com>> wrote:
Dear Colleagues,
I begin by apologizing for any communication error, as I am Brazilian and I
still try to adapt with the English language.
I'
Every silver lining has a cloud.
On Sat, 15 Feb 2020, Dudi Goldenberg wrote:
Date: Sat, 15 Feb 2020 14:32:28
From: Dudi Goldenberg
To: Henrique Fagundes
Cc: Fail2ban Users
Subject: Re: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
Hi,
I don't see 'logpath =' set in [p
: Fail2ban Users
Subject: RE: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
Friend,
Follow my /etc/fail2ban/jail.conf settings:
[INCLUDES]
before = paths-fedora.conf
[DEFAULT]
ignoreip = 127.0.0.1/8
ignorecommand =
bantime = -1
findtime = 3600
maxretry = 3
backend = auto
usedns = warn
paranoid.
On Sat, 15 Feb 2020, Henrique Fagundes wrote:
Date: Sat, 15 Feb 2020 13:44:44
From: Henrique Fagundes
To: Dudi Goldenberg
Cc: Fail2ban Users
Subject: Re: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
Friend,
In practice, it doesn't work!
I am purposely missing the logins and
Is the log file really /var/log/secure and not say /var/log/secure.log?
Also, you have maxretry set to 3 which is fine but this means it will only
trigger a block after triggering 3x.
On Sat, 15 Feb 2020 at 14:42, Henrique Fagundes
wrote:
> LogPath:
>
> [phpmyadmin]
> enabled = true
> port = ht
log/mail.log_current
> banaction = %(banaction_allports)s
>
> [directadmin]
> logpath = /var/log/directadmin/login.log
> port =
>
> [portsentry]
> logpath = /var/lib/portsentry/portsentry.history
> maxretry = 1
>
> [pass2allow-ftp]
> port
g
Cc: Fail2ban Users
Subject: RE: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
Friend,
Follow my /etc/fail2ban/jail.conf settings:
[INCLUDES]
before = paths-fedora.conf
[DEFAULT]
ignoreip = 127.0.0.1/8
ignorecommand =
bantime = -1
findtime = 3600
maxretry = 3
backend = auto
usedns = w
oLinux
https://t.me/AprendendoLinux
https://t.me/GrupoAprendendoLinux
__
Participe do Grupo Aprendendo Linux
https://listas.aprendendolinux.com/listinfo/aprendendolinux
Ou envie um e-mail para:
aprendendolinux-subscr...@listas.apr
rds,
>
>
>
> Dudi
>
>
>
> *From:* Dominic Raferd [mailto:domi...@timedicer.co.uk]
> *Sent:* Saturday, February 15, 2020 15:16
> *To:* fail2ban-users
> *Subject:* Re: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
>
>
>
> It works for me - see here:
Goldenberg
Cc: Fail2ban Users
Subject: RE: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
Friend,
In practice, it doesn't work!
I am purposely missing the logins and does not block.
I did a test with FTP and it blocks normally.
I don't know what's going on.
Ativado Sáb, 15 fe
]
> Sent: Saturday, February 15, 2020 15:28
> To: Dudi Goldenberg
> Cc: Fail2ban Users
> Subject: RE: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
>
> Friend,
>
> Unfortunately, the rule you gave me didn't work!
>
> The log file is /var/ log /
: Dudi Goldenberg
Cc: Fail2ban Users
Subject: RE: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
Friend,
Unfortunately, the rule you gave me didn't work!
The log file is /var/ log /secure.
I ran the command below:
fail2ban-regex /var/log/secure /etc/fail2ban/filter.d/phpmyadmin.conf
Tha
-users] Help with Fail2Ban on PhpMyAdmin
It works for me - see here:
# fail2ban-regex 'Feb 14 21:48:06 www phpMyAdmin[3981]: user denied: root
(mysql-denied) from 177.122.254.10' 'user denied: \S*
\((mysql|allow|root|empty)-denied\) from $'
Running tests
=
Use f
s,
>
> Dudi
>
> -Original Message-
> From: Henrique Fagundes [mailto:supo...@aprendendolinux.com]
> Sent: Saturday, February 15, 2020 13:26
> To: Dudi Goldenberg
> Subject: RE: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
>
> Friend,
>
&g
It works for me - see here:
# fail2ban-regex 'Feb 14 21:48:06 www phpMyAdmin[3981]: user denied: root
(mysql-denied) from 177.122.254.10' 'user denied: \S*
\((mysql|allow|root|empty)-denied\) from $'
Running tests
=
Use failregex line : user denied: \S* \((mysql|allow|rooy|empty)-de
> Dudi
>
>
> -Original Message-
> From: Henrique Fagundes [mailto:supo...@aprendendolinux.com]
> Sent: Saturday, February 15, 2020 3:34
> To: fail2ban-users
> Subject: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
>
> Dear Colleagues,
>
Hi friend
I tried to use the "failregex" rule that you indicated. Unfortunately it didn't
work! Is there anything else I can try?
I'm grateful!
Ativado Sáb, 15 fev 2020 05:37:26 -0300 Dominic Raferd
escreveu
>
>
> On Sat, 15 Feb 2020 at 01:54, Henrique Fagundes
> wrote:
>
On Sat, 15 Feb 2020 at 01:54, Henrique Fagundes
wrote:
> Dear Colleagues,
>
> I begin by apologizing for any communication error, as I am Brazilian and
> I still try to adapt with the English language.
>
> I'm having a hard time getting Fail2Ban to work on phpmyadmin.
>
> I'm using CentOS 8.1.191
: Saturday, February 15, 2020 3:34
To: fail2ban-users
Subject: [Fail2ban-users] Help with Fail2Ban on PhpMyAdmin
Dear Colleagues,
I begin by apologizing for any communication error, as I am Brazilian and I
still try to adapt with the English language.
I'm having a hard time getting Fail2Ban to wo
Dear Colleagues,
I begin by apologizing for any communication error, as I am Brazilian and I
still try to adapt with the English language.
I'm having a hard time getting Fail2Ban to work on phpmyadmin.
I'm using CentOS 8.1.1911 and fail2ban 0.10.5-2.
My PhpMyAdmin is version 4.9.0.1.
I noticed
On 07/23/2018 10:28 PM, Philip James Clarke wrote:
> So all you need to do is add
> enabled=true
> under [ASSP]
>
Ah! So simple. Thank you.
--
James Moe
moe dot james at sohnen-moe dot com
520.743.3936
Think.
--
Hi,
I am using fail2ban with assp and following is my assp config from jail.local
[assp]
enabled = true
port = smtp,465,submission
filter = assp
logpath = /path/to/assp/logs/maillog.txt
findtime = 3600
bantime = 3600
action = iptables-multiport[name=assp, port="smtp,465,submission", protoc
From the jail.conf for fail2ban version 0.9
# "enabled" enables the jails.
# By default all jails are disabled, and it should stay this way.
# Enable only relevant to your setup jails in your .local or jail.d/*.conf
#
# true: jail will be enabled and log files will get monitored for changes
# f
opensuse 15.0
linux 4.12.14-lp150.12.4-default x86_64
fail2ban 0.10.3
I am new to fail2ban. I have a few questions.
* Are there docs that describe how the various parts of fail2ban work
together? The actions and flow of information?
I am interested in setting up a jail for ASSP (Anti-Spam SM
28 matches
Mail list logo
