Fail2ban Fail2ban is a tool that scans logs and bans IP that makes too many password failures.
Download

Fail2ban Ranking & Summary

Fail2ban Tags

password logging password failure deny host deny ip failure

Fail2ban Description

Fail2ban is a tool that scans logs and bans IP that makes too many password failures. Fail2ban is a tool that scans logs and bans IP that makes too many password failures. It scans files like /var/log/pwdfail or /var/log/apache/error_log and updates firewall rules to reject the IP address.Here are some key features of "Fail2ban":· Highly configurable. · Parses log files and looks for given patterns. · Executes a command when a pattern has be detected for the same IP address for more than X times. X can be changed. · After a given amount of time, executes another command in order to unban the IP address. · Uses Netfilter/Iptables by default but can also use TCP Wrapper (/etc/hosts.deny) or others firewalls. · Handles log files rotation. · Can handle more than one service (sshd, apache, vsftpd, etc). · Resolves DNS hostname to IP address. · Can send e-mail notifications. · Runs as a daemon. · Multiple logging targets (syslog daemon, stdout, stderr, files).Requirements:· Python >=2.3 · Log4py (not needed with >=fail2ban-0.5.2)· Netfilter/IptablesWhat's New in This Release:· failtickets are processed as long as failmanager is not empty.· The "pam-generic" filter and more configuration fixes were added.· The PID file while started in daemon mode was fixed.· The "fail2ban-client get jail logpath" was fixed.· The gssftpd filter was added.· The "Day/Month/Year Hour:Minute:Second" date template was added. ignoreregex processing was fixed in fail2ban-client.· The ISO 8601 date/time format was added.· Some logging levels and messages were added and changed.· Poll is used instead of select in asyncore.loop.· This should solve the "Unknown error 514". What's New in This Release: · The inode number is checked for rotation in addition to checking the first line of the file. · The shutdown of the logging subsystem was moved out of Server.quit() to the end of Server.start(). This fixes the "cannot release un-acquired lock" error. · The "Ban IP" command was added. · Two new filters were added: lighttpd-fastcgi and php-url-fopen. · The "unexpected communication error" problem was fixed by means of use_poll=False in Python 2.6 and later. · Many more changes were made.

Fail2ban Related Software