Re: handmatige ban IP m.b.v. fail2ban-client

[Rutger van Sleen <djslash+debian@djslash.org>]

On 27-09-2014 08:23, Geert Stappers wrote:
> Hoi,
>
> Hoe gedraagt `fail2ban-client set <JAIL> banip <IP>` zich bij jullie?

Zoals je zou verwachten:

root@sysyphus:~# fail2ban-client set ssh banip 10.100.10.100
10.100.10.100

root@sysyphus:~# fail2ban-client status ssh
Status for the jail: ssh
|- filter
|  |- File list:        /var/log/auth.log
|  |- Currently failed: 0
|  `- Total failed:     2345
`- action
   |- Currently banned: 1
   |  `- IP list:       10.100.10.100
   `- Total banned:     283

root@sysyphus:~# iptables -L -n |grep -B2 10.100
Chain fail2ban-ssh (1 references)
target     prot opt source               destination
REJECT     all  --  10.100.10.100        0.0.0.0/0            
reject-with icmp-port-unreachable

root@sysyphus:~# aptitude versions '~ifail2ban'
Package fail2ban:
i  0.8.13-1                  testing  500