Nick, thanks for the info…is there a way for me to make a feature request?  I 
would suggest a way to list banned ip’s and a way to un-ban an ip would be 
helpful.

Thanks!


Tony

From: Nick Couchman <[email protected]>
Sent: Friday, October 31, 2025 2:04 PM
To: [email protected]
Subject: Re: [External] fail2ban control

On Fri, Oct 31, 2025 at 1:13 PM Tony Guadagno 
<[email protected]<mailto:[email protected]>> 
wrote:
Hi, I have some questions about the fail2ban implementation in the docker 
container.  I have it set pretty aggressively and occasionally, someone gets 
banned who should not.  I looked up how to unban an ip and I see references to 
“fail2ban-client” but that command does not work in the container.  Is there 
another way to remove a banned ip from the list?  Is there a way to add 
fail2ban-client to the container?


If you're using the 1.6.0 container, the implementation is actually not based 
on Fail2Ban, it's a Guacamole-specific extension that tracks failed logins 
based on client IP address and blocks those client IPs if they exceed the 
specified threshold for failed logins within a certain amount of time. The 
documentation for it is here:

https://guacamole.apache.org/doc/gug/auth-ban.html#installing-enabling-brute-force-authentication-detection<https://urldefense.proofpoint.com/v2/url?u=https-3A__guacamole.apache.org_doc_gug_auth-2Dban.html-23installing-2Denabling-2Dbrute-2Dforce-2Dauthentication-2Ddetection&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=FAi7_Un_xIwqyE1tNdU-gb08bRZLlfxR_VZo5-zbQF0&m=RO197TLEWq-OHw43zt1FG5jhhs2LzuSfWCPG7tRIikY7EkIZqi9omK1fKjlfZjML&s=sOOSKak3jExPbGXrAoNEIBgZJdvG_RZ1eLkrXX9oFz0&e=>

There currently is no way to affect the list of IP addresses (e.g. remove 
addresses from the list) - you simply have to allow the timer to expire. There 
are some configuration parameters available in the document linked above that 
help you adjust things if you need to tune the duration of the lockout, the 
number of failed attempts, etc.

-Nick




________________________________

This email has been scanned for spam and viruses by Proofpoint Essentials. 
Click 
here<https://us1.proofpointessentials.com/app/report_spam.php?mod_id=11&mod_option=logitem&report=1&type=easyspam&k=k1&payload=53616c7465645f5f8b76975604075b10b7b596b8795e5328f43356cb250eaf92c9a03e585b40126f32ac3f36807a29790e692bd565448638cbbca59576b0c1c8ef35263ca94a6e0e0e2941e4b1aea50ce10d857411a7cffc10bc010b3a4e0332c7644a14e02251194e292bf10dcdc17c1dd711a3214257cc62eaae517e0762b124c94fd66be4e1c283c21e4e497d4176655709488139f63eda8258c669b3fad5>
 to report this email as spam.

Reply via email to