Quantcast
Channel: Proxmox Support Forum
Viewing all articles
Browse latest Browse all 170578

Fail2ban for Proxmox 3.1

$
0
0
Taking a look to this link http://pve.proxmox.com/wiki/Fail2ban seems that it lacks of updates for the newest Proxmox 3.1, so I have decide to write down the following guide (it is a traslation and adaptation to this guide http://wiki.csnu.org/index.php?title..._avec_fail2ban ) :

Protecting the web interface with fail2ban

Code:

aptitude install fail2ban
Add the following string to the end of this file /etc/fail2ban/jail.local :

Code:

[proxmox3]
enabled = true
port = https,http,8006
filter = proxmox3
logpath = /var/log/daemon.log
maxretry = 3
bantime = 3600 # 1 hour

Create the file /etc/fail2ban/filter.d/proxmox3.conf :

Code:

[Definition]
failregex = pvedaemon\[.*authentication failure; rhost=<HOST> user=.* msg=.*
ignoreregex =

You can test your configuration with the command :

Code:

fail2ban-regex /var/log/daemon.log /etc/fail2ban/filter.d/proxmox3.conf
Restart fail2ban:

Code:

/etc/init.d/fail2ban restart
PS Can you update your wiki?

Viewing all articles
Browse latest Browse all 170578

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>