Combining fail2ban and firewalld Block by Country for a Layered Approach to Intrusion Protection

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Ok, so first question... Is the working title too long? :)

I referenced this article for the initial idea:
https://www.linode.com/community/questions/11143/top-tip-firewalld-and-ipset-country-blacklist

My basic outline:
- Installing and setting up fail2ban, specifically for sshd
- Methods to monitor the fail2ban log or get the sshd jail status from
fail2ban-client
- How to block IPs by country .
- Will include:
-- The script to largely automate the process
-- A SystemD service file and timerl so updates to network addresses are
picked up on a regular basis. (monthly?)

If I work on this much more I should probably submit it as a package :)

Next steps?

Thanks,
Richard
_______________________________________________
Fedora Magazine mailing list -- magazine@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to magazine-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/magazine@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora Users]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Devel]     [EPEL Announce]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Mentors]     [Fedora Package Review]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [ET Management Tools]     [Yum Users]     [Fedora Art]     [Fedora ARM]

  Powered by Linux