Re: [ubuntu-uk] fail2ban custom iptables rules

Hi Chris, It certainly is. Attached are samples of my iptables-restore and fail2ban configs for hardy-based servers. Hi Tyler, Thanks for taking the time to share your config, I really appreciate it! :-) Thanks, Chris -- ubuntu-uk@lists.ubuntu.com

[ubuntu-uk] fail2ban custom iptables rules

Hi folks, I've been experimenting with using fail2ban to protect Internet facing servers. I was wondering if it is possible to implement your own iptables rules alongside fail2ban. For instance, I'd probably want to set up an iptables rule that drops any inbound traffic not going to ICMP, HTTP,

Re: [ubuntu-uk] fail2ban custom iptables rules

Hi Chris, It certainly is. Attached are samples of my iptables-restore and fail2ban configs for hardy-based servers. My iptables config creates the fail2ban-ssh chain, so I've changed the iptables-multiport fail2ban action so that it doesn't. And I prefer that fail2ban only block NEW ssh