evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 17 Releases 34 Wiki Activity

[FAIL2BAN] use jail.d conf files #8

New issue
Open
opened 2019-03-21 15:26:05 +01:00 by gcolpart · 0 comments
gcolpart commented 2019-03-21 15:26:05 +01:00
Owner
Copy link

Issue imported from forge.evolix.org on 2019-03-21 14:26:05

  • Project: ansible-roles
  • Issue: 2479
  • Tracker: Evolution
  • Status: Nouveau
  • Author: Gregory C.
  • Category:
  • Started at: 2018-08-23 00:00:00
  • Done ratio: 0
  • Created at: 2018-08-23 10:45:47
  • Updated at: 2018-08-23 10:45:47

Fail2Ban can use conf files in /etc/fail2ban/jail.d/*.conf
We can use pattern evolinux-defaults/custom settings (please define it before in HowtoFail2Ban wiki).

Note : in Debian 9, sshd jail is enabled by default via /etc/fail2ban/jail.d/defaults-debian.conf file. We want sshd jail disabled by default, then we need override via /etc/fail2ban/jail.d/evolinux-defaults.conf and offer possibility to enable via Ansible var in etc/fail2ban/jail.d/evolinux-custom.conf

> **Issue imported from forge.evolix.org on 2019-03-21 14:26:05** > * Project: ansible-roles > * Issue: 2479 > * Tracker: Evolution > * Status: Nouveau > * Author: Gregory C. > * Category: > * Started at: 2018-08-23 00:00:00 > * Done ratio: 0 > * Created at: 2018-08-23 10:45:47 > * Updated at: 2018-08-23 10:45:47 Fail2Ban can use conf files in /etc/fail2ban/jail.d/\*.conf We can use pattern evolinux-defaults/custom settings (please define it before in HowtoFail2Ban wiki). Note : in Debian 9, sshd jail is enabled by default via /etc/fail2ban/jail.d/defaults-debian.conf file. We want sshd jail disabled by default, then we need override via /etc/fail2ban/jail.d/evolinux-defaults.conf and offer possibility to enable via Ansible var in etc/fail2ban/jail.d/evolinux-custom.conf
benpro added the
question
enhancement
 labels 2019-08-14 10:15:58 +02:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
stable
etherpad_evonormes_1
unstable
monitoringctl
munin_ipmi
patroni
etcd
bind
wip_10691
multi-php-v2
add-drbd-firewall-rule
backports_preferences
migrate-vm-error-handling
evofs
goto-postfix-role
lxc-php82
timesyncd
noopensshinlxc
ssh-split
rsyslog-remote
emorino/patroni-etcd
jitsimeet_docker
replace_include
when-not-check
fix_lxc_php56_debian10
debian12
boost-proxy
debian12-keyring
evodomains
vrrp-addresses
lxc_etc-git
lxc_etc-commit
evoacme-v2
sshd_modular_config
exclusion_images_evobackup
rotate_elasticsearch_logs
evobackup_tags_redux
log2mail-beats
T47076
kvm-guest
lpoujol/fpm-php
lxc-php-buster
simplify-evolinux-users
openvpn
newkernel
etc-git-status-script
ubuntu
nagios-sudoers
configurable-swapiness
alert5-minifirewall-restart
fail2ban_ips_tag
audit-ftpadmin
projet6062
whitelisting-changes
uvrrpd
packweb-apache-lxc
backup/jlecour/ssh-groups
nextcloud
backup/jlecour/nextcloud
evoadmin-mail
haproxy_munin
evolinux-users
ansible-log
ansible-managed
apache-fix-default-vhost
ipsec
courier
spamassassin
samba
munin-openbsd
24.05
24.04
24.03
24.02.1
24.02
23.10
23.04
23.03.1
23.03
22.12
22.09
22.07.1
22.07
22.06.3
22.06.2
22.06.1
22.06
22.05.1
22.05
22.03
22.01.3
22.01.2
22.01.1
22.01
10.6.0
10.5.1
10.5.0
10.4.0
10.3.0
10.2.0
10.1.0
10.0.0
9.10.1
9.10.0
9.9.0
9.8.0
9.7.0
9.6.0
9.5.0
9.4.2
9.4.1
9.4.0
9.3.2
9.3.1
9.3.0
9.2.0
9.1.9
9.1.8
9.1.7
9.1.6
9.1.5
9.1.4
9.1.3
9.1.2
9.1.1
9.1.0
9.0.1
9.0.0
Labels
Clear labels   
bug

Something is not working

  
duplicate

This issue or pull request already exists

  
enhancement

New feature

  
help wanted

Need some help

  
invalid

Something is wrong

  
question

More information is needed

  
security

Concern a security issue

  
wontfix

This won't be fixed

No labels
bug
duplicate
enhancement
help wanted
invalid
question
security
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: evolix/ansible-roles#8
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?