Update .gitignore to exclude fail2ban data directory, clean up docker-compose.yaml by removing unused volume mappings, and add new Fail2Ban filter configurations for enhanced security against various attack vectors.
This commit is contained in:
17
fail2ban/jail.d/sshd.local
Normal file
17
fail2ban/jail.d/sshd.local
Normal file
@@ -0,0 +1,17 @@
|
||||
[DEFAULT]
|
||||
banaction = nftables-multiport
|
||||
backend = auto
|
||||
findtime = 10m
|
||||
bantime = 30m
|
||||
maxretry = 3
|
||||
bantime.increment = false
|
||||
bantime.factor = 1
|
||||
bantime.maxtime = 24h
|
||||
mode = aggressive
|
||||
|
||||
[sshd]
|
||||
enabled = true
|
||||
port = 2522
|
||||
filter = sshd
|
||||
logpath = /var/log/auth.log
|
||||
action = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="tcp"]
|
||||
Reference in New Issue
Block a user