Subversion Repositories ALCASAR

Rev

Rev 2272 | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 2272 Rev 2284
Line 1... Line 1...
1 
#!/bin/sh
 1 
#!/bin/sh
2 
# $Id: fail2ban.sh 2272 2017-06-04 19:03:43Z tom.houdayer $
 2 
# $Id: fail2ban.sh 2284 2017-06-20 08:10:24Z tom.houdayer $
3 
 
 3 
 
4 
FAIL_CONF="/etc/fail2ban/fail2ban.conf"
 4 
FAIL_CONF="/etc/fail2ban/fail2ban.conf"
5 
JAIL_CONF="/etc/fail2ban/jail.conf"
 5 
JAIL_CONF="/etc/fail2ban/jail.conf"
6 
DIR_FILTER="/etc/fail2ban/filter.d/"
 6 
DIR_FILTER="/etc/fail2ban/filter.d/"
7 
ACTION_ALLPORTS="/etc/fail2ban/action.d/iptables-allports.conf"
 7 
ACTION_ALLPORTS="/etc/fail2ban/action.d/iptables-allports.conf"
Line 120... Line 120...
120 
action   = iptables-allports[name=SSH]
 120 
action   = iptables-allports[name=SSH]
121 
logpath  = /var/log/auth.log
 121 
logpath  = /var/log/auth.log
122 
maxretry = 3
 122 
maxretry = 3
123 
 
 123 
 
124 
# Bannissement sur tous les ports après 5 échecs de connexion sur le centre de contrôle (ACC)
 124 
# Bannissement sur tous les ports après 5 échecs de connexion sur le centre de contrôle (ACC)
125 
[alcasar_acc-htdigest]
 125 
[alcasar_acc]
126 
 
 126 
 
127 
enabled = true
 127 
enabled = true
128 
#enabled = false
 128 
#enabled = false
129 
filter = alcasar_acc-htdigest
 129 
filter = alcasar_acc
130 
action = iptables-allports[name=alcasar_acc-htdigest]
 130 
action = iptables-allports[name=alcasar_acc]
131 
logpath = /var/log/httpd/ssl_error_log
 131 
logpath = /var/log/httpd/ssl_error_log
132 
maxretry = 5
 132 
maxretry = 5
133 
 
 133 
 
134 
# Bannissement sur tout les ports après 5 echecs de connexion pour un usager
 134 
# Bannissement sur tout les ports après 5 echecs de connexion pour un usager
135 
[alcasar_intercept]
 135 
[alcasar_intercept]
Line 190... Line 190...
190 
EOF
 190 
EOF
191 
 
 191 
 
192 
#######################
 192 
#######################
193 
## ACC-HTDIGEST.CONF ##
 193 
## ACC-HTDIGEST.CONF ##
194 
#######################
 194 
#######################
195 
cat << EOF > $DIR_FILTER/alcasar_acc-htdigest.conf
 195 
cat << EOF > $DIR_FILTER/alcasar_acc.conf
196 
# Fail2Ban configuration file
 196 
# Fail2Ban configuration file
197 
#
 197 
#
198 
# Author: Cyril Jaquier
 198 
# Author: Cyril Jaquier
199 
# Adapted by ALCASAR team
 199 
# Adapted by ALCASAR team
200 
 
 200