fail2ban mit multitail
apt install nginx sendmail iptables-persistent fail2ban
cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
Änderungen in /etc/fail2ban/jail.local
zb ufw oder iptables anablen
colorscheme:syslog:syslog
mcsre_s:red,,bold:^.*(fail2ban\.[[:alnum:]]+)\[[[:digit:]]+\]:
cs_re_s:red,,bold:^.*fail2ban\.[[:alnum:]]+\[[[:digit:]]+\]: ([[:alnum:]]+) \[.*\] ([[:alnum:]]+) [0-9\.:]+
cs_re_s:cyan,,bold:^.*fail2ban\.[[:alnum:]]+\[[[:digit:]]+\]: [[:alnum:]]+ (\[.*\]) [[:alnum:]]+ [0-9\.:]+
cs_re_s:yellow,,bold:^.*fail2ban\.[[:alnum:]]+\[[[:digit:]]+\]: [[:alnum:]]+ \[.*\] [[:alnum:]]+ ([0-9\.:]+)
Leave a Reply