( szabi2k | 2012. 02. 17., p – 19:32 )

Apropo fail2ban...
Megtetszett, feltettem, elinditottam, valahonnan probalkoztam jo sokszor sikertelenul belepni, de nem banelt...
A /var/log/fail2ban.log tartalma:

2012-02-17 20:10:08,822 fail2ban.server : INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.4-SVN
2012-02-17 20:10:08,822 fail2ban.jail : INFO Creating new jail 'ssh'
2012-02-17 20:10:08,822 fail2ban.jail : INFO Jail 'ssh' uses poller
2012-02-17 20:10:08,836 fail2ban.filter : INFO Added logfile = /var/log/auth.log
2012-02-17 20:10:08,836 fail2ban.filter : INFO Set maxRetry = 6
2012-02-17 20:10:08,837 fail2ban.filter : INFO Set findtime = 600
2012-02-17 20:10:08,837 fail2ban.actions: INFO Set banTime = 600
2012-02-17 20:10:08,906 fail2ban.jail : INFO Jail 'ssh' started

Ha jol ertem belole, 10 percenkent megnezi az auth.log-ot, s ha tobb mint 6 sikertelen bejelentkezesi kiserlet egy ip-rol, akkor ban. Gyakorlatilag viszont semmi. Tipp?