forked from evolix/ansible-roles
fail2ban: For sshd jail, protect 2222 port too
2222 port is heavily attacked by bots like 22.
This commit is contained in:
parent
de0a4c2ca8
commit
1a7349ee3d
|
@ -27,6 +27,12 @@ action_mwl = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(proto
|
||||||
|
|
||||||
action = %(action_mwl)s
|
action = %(action_mwl)s
|
||||||
|
|
||||||
|
[sshd]
|
||||||
|
port = ssh,2222
|
||||||
|
logpath = %(sshd_log)s
|
||||||
|
backend = %(sshd_backend)s
|
||||||
|
maxretry = 10
|
||||||
|
|
||||||
{% if fail2ban_wordpress %}
|
{% if fail2ban_wordpress %}
|
||||||
[wordpress-hard]
|
[wordpress-hard]
|
||||||
enabled = true
|
enabled = true
|
||||||
|
|
Loading…
Reference in a new issue