Posts Tagged: fail2ban

Fail2Ban Custom Action

I decided to experiment with creating a central database to hold the IP addresses banned by various servers / honeypots running Fail2Ban – so that the information could be used as a source for IPtables or TCPWrappers to protect other servers. I created the file /etc/fail2ban/action.d/qshield.conf and in it placed the following: [Definition] actionstart =… Read more »