C[omp]ute

From: andrew cooke <andrew@...>

Date: Fri, 30 Jul 2021 09:58:50 -0400

Couldn't find this documented anywhere, but it works just fine.

  localhost:/etc/fail2ban # cat jail.local

  [DEFAULT]
  bantime = 1h
  maxretry = 3

  [sshd]
  enabled = true
  backend = systemd
  banaction = nftables

  localhost:/etc/fail2ban # cat fail2ban.local

  [DEFAULT]
  loglevel = INFO

Typical log output:

  localhost:/var/log # tail fail2ban.log
  2021-07-30 08:19:02,184 fail2ban.filter         [16653]: INFO    [sshd] Found 49.88.112.69 - 2021-07-30 08:19:01
  2021-07-30 08:19:02,249 fail2ban.actions        [16653]: NOTICE  [sshd] Ban 49.88.112.69
  2021-07-30 08:28:00,927 fail2ban.actions        [16653]: NOTICE  [sshd] Unban 205.185.125.109
  2021-07-30 09:05:49,815 fail2ban.actions        [16653]: NOTICE  [sshd] Unban 77.227.158.129
  2021-07-30 09:19:02,048 fail2ban.actions        [16653]: NOTICE  [sshd] Unban 49.88.112.69
  2021-07-30 09:23:52,935 fail2ban.filter         [16653]: INFO    [sshd] Found 205.185.127.25 - 2021-07-30 09:23:52
  2021-07-30 09:23:54,934 fail2ban.filter         [16653]: INFO    [sshd] Found 205.185.127.25 - 2021-07-30 09:23:54
  2021-07-30 09:24:52,933 fail2ban.filter         [16653]: INFO    [sshd] Found 205.185.127.25 - 2021-07-30 09:24:52
  2021-07-30 09:24:53,125 fail2ban.actions        [16653]: NOTICE  [sshd] Ban 205.185.127.25
  2021-07-30 09:24:54,434 fail2ban.filter         [16653]: INFO    [sshd] Found 205.185.127.25 - 2021-07-30 09:24:54

All under systemd control.

Andrew