summaryrefslogtreecommitdiff
path: root/templates
diff options
context:
space:
mode:
authorJulien Dessaux2018-05-02 13:41:00 +0200
committerJulien Dessaux2018-05-02 14:23:30 +0200
commitb5de62baf8703d3597edd5e2bf7a7212c7d41a05 (patch)
tree995a6ddd04b1dc40839caa19f7f1923cbae7a295 /templates
parentFinished adding ipv6 addresses on all openvpn intercos (diff)
downloadmasterfiles-b5de62baf8703d3597edd5e2bf7a7212c7d41a05.tar.gz
masterfiles-b5de62baf8703d3597edd5e2bf7a7212c7d41a05.tar.bz2
masterfiles-b5de62baf8703d3597edd5e2bf7a7212c7d41a05.zip
Added fail2ban support for sshd on linux
Diffstat (limited to 'templates')
-rw-r--r--templates/fail2ban/jail.local11
1 files changed, 11 insertions, 0 deletions
diff --git a/templates/fail2ban/jail.local b/templates/fail2ban/jail.local
new file mode 100644
index 0000000..c43a87b
--- /dev/null
+++ b/templates/fail2ban/jail.local
@@ -0,0 +1,11 @@
+###############################################################################
+# \_o< WARNING : This file is being managed by cfengine! >o_/ #
+# ~~~~ ~~~~ #
+###############################################################################
+[DEFAULT]
+ignoreip = 127.0.0.1/8 10.1.0.0/24 37.187.103.36 137.74.173.247 90.85.207.113
+bantime = 3600
+banaction = shorewall
+
+[sshd]
+enabled = true