wok diff fail2ban/description.txt @ rev 25403

updated vzctl (3.0.25.1 -> 4.11.1)
author Hans-G?nter Theisgen
date Tue Aug 02 16:35:24 2022 +0100 (2022-08-02)
parents
children
line diff
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/fail2ban/description.txt	Tue Aug 02 16:35:24 2022 +0100
     1.3 @@ -0,0 +1,15 @@
     1.4 +Fail2ban scans log files (e.g. /var/log/apache/error_log) and
     1.5 +bans IPs that show the malicious signs -- too many password
     1.6 +failures, seeking for exploits, etc.
     1.7 +Generally Fail2Ban is then used to update firewall rules to
     1.8 +reject the IP addresses for a specified amount of time,
     1.9 +although any arbitrary other action (e.g. sending an email)
    1.10 +could also be configured.
    1.11 +Out of the box Fail2Ban comes with filters for various services
    1.12 +(apache, courier, ssh, etc).
    1.13 +
    1.14 +Fail2Ban is able to reduce the rate of incorrect authentications
    1.15 +attempts however it cannot eliminate the risk that weak
    1.16 +authentication presents.
    1.17 +Configure services to use only two factor or public/private
    1.18 +authentication mechanisms if you really want to protect services.