Просмотр исходного кода

Configured Fail2Ban for Hestia.

Raphael Schneeberger 7 лет назад
Родитель
Сommit
b64c1efdaa
33 измененных файлов с 88 добавлено и 405 удалено
  1. 0 9
      install/debian/8/fail2ban/action.d/vesta.conf
  2. 0 10
      install/debian/8/fail2ban/filter.d/vesta.conf
  3. 8 8
      install/debian/8/fail2ban/jail.local
  4. 0 9
      install/debian/9/fail2ban/action.d/vesta.conf
  5. 0 10
      install/debian/9/fail2ban/filter.d/vesta.conf
  6. 8 8
      install/debian/9/fail2ban/jail.local
  7. 0 9
      install/ubuntu/14.04/fail2ban/action.d/vesta.conf
  8. 0 10
      install/ubuntu/14.04/fail2ban/filter.d/vesta.conf
  9. 8 20
      install/ubuntu/14.04/fail2ban/jail.local
  10. 0 9
      install/ubuntu/14.10/fail2ban/action.d/vesta.conf
  11. 0 10
      install/ubuntu/14.10/fail2ban/filter.d/vesta.conf
  12. 8 20
      install/ubuntu/14.10/fail2ban/jail.local
  13. 0 9
      install/ubuntu/15.04/fail2ban/action.d/vesta.conf
  14. 0 10
      install/ubuntu/15.04/fail2ban/filter.d/vesta.conf
  15. 8 20
      install/ubuntu/15.04/fail2ban/jail.local
  16. 0 9
      install/ubuntu/15.10/fail2ban/action.d/vesta.conf
  17. 0 10
      install/ubuntu/15.10/fail2ban/filter.d/vesta.conf
  18. 8 20
      install/ubuntu/15.10/fail2ban/jail.local
  19. 0 9
      install/ubuntu/16.04/fail2ban/action.d/vesta.conf
  20. 0 10
      install/ubuntu/16.04/fail2ban/filter.d/vesta.conf
  21. 8 20
      install/ubuntu/16.04/fail2ban/jail.local
  22. 0 9
      install/ubuntu/16.10/fail2ban/action.d/vesta.conf
  23. 0 10
      install/ubuntu/16.10/fail2ban/filter.d/vesta.conf
  24. 8 20
      install/ubuntu/16.10/fail2ban/jail.local
  25. 0 9
      install/ubuntu/17.04/fail2ban/action.d/vesta.conf
  26. 0 10
      install/ubuntu/17.04/fail2ban/filter.d/vesta.conf
  27. 8 20
      install/ubuntu/17.04/fail2ban/jail.local
  28. 0 9
      install/ubuntu/17.10/fail2ban/action.d/vesta.conf
  29. 0 10
      install/ubuntu/17.10/fail2ban/filter.d/vesta.conf
  30. 8 20
      install/ubuntu/17.10/fail2ban/jail.local
  31. 0 9
      install/ubuntu/18.04/fail2ban/action.d/vesta.conf
  32. 0 10
      install/ubuntu/18.04/fail2ban/filter.d/vesta.conf
  33. 8 20
      install/ubuntu/18.04/fail2ban/jail.local

+ 0 - 9
install/debian/8/fail2ban/action.d/vesta.conf

@@ -1,9 +0,0 @@
-# Fail2Ban configuration file for vesta
-
-[Definition]
-
-actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
-actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
-actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
-actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
-actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>

+ 0 - 10
install/debian/8/fail2ban/filter.d/vesta.conf

@@ -1,10 +0,0 @@
-# Fail2Ban filter for unsuccessful Vesta authentication attempts
-#
-
-[INCLUDES]
-before = common.conf
-
-[Definition]
-failregex =  .* <HOST> failed to login
-ignoreregex =
-

+ 8 - 8
install/debian/8/fail2ban/jail.local

@@ -1,39 +1,39 @@
 [ssh-iptables]
 enabled  = true
 filter   = sshd
-action   = vesta[name=SSH]
+action   = hestia[name=SSH]
 logpath  = /var/log/auth.log
 maxretry = 5
 
 [vsftpd-iptables]
 enabled  = false
 filter   = vsftpd
-action   = vesta[name=FTP]
+action   = hestia[name=FTP]
 logpath  = /var/log/vsftpd.log
 maxretry = 5
 
 [exim-iptables]
 enabled = true
 filter  = exim
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/exim4/mainlog
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/dovecot.log
 
 [mysqld-iptables]
 enabled  = false
 filter   = mysqld-auth
-action   = vesta[name=DB]
+action   = hestia[name=DB]
 logpath  = /var/log/mysql.log
 maxretry = 5
 
-[vesta-iptables]
+[hestia-iptables]
 enabled = true
-filter  = vesta
-action  = vesta[name=VESTA]
+filter  = hestia
+action  = hestia[name=HESTIA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5

+ 0 - 9
install/debian/9/fail2ban/action.d/vesta.conf

@@ -1,9 +0,0 @@
-# Fail2Ban configuration file for vesta
-
-[Definition]
-
-actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
-actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
-actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
-actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
-actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>

+ 0 - 10
install/debian/9/fail2ban/filter.d/vesta.conf

@@ -1,10 +0,0 @@
-# Fail2Ban filter for unsuccessful Vesta authentication attempts
-#
-
-[INCLUDES]
-before = common.conf
-
-[Definition]
-failregex =  .* <HOST> failed to login
-ignoreregex =
-

+ 8 - 8
install/debian/9/fail2ban/jail.local

@@ -1,39 +1,39 @@
 [ssh-iptables]
 enabled  = true
 filter   = sshd
-action   = vesta[name=SSH]
+action   = hestia[name=SSH]
 logpath  = /var/log/auth.log
 maxretry = 5
 
 [vsftpd-iptables]
 enabled  = false
 filter   = vsftpd
-action   = vesta[name=FTP]
+action   = hestia[name=FTP]
 logpath  = /var/log/vsftpd.log
 maxretry = 5
 
 [exim-iptables]
 enabled = true
 filter  = exim
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/exim4/mainlog
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/dovecot.log
 
 [mysqld-iptables]
 enabled  = false
 filter   = mysqld-auth
-action   = vesta[name=DB]
+action   = hestia[name=DB]
 logpath  = /var/log/mysql.log
 maxretry = 5
 
-[vesta-iptables]
+[hestia-iptables]
 enabled = true
-filter  = vesta
-action  = vesta[name=VESTA]
+filter  = hestia
+action  = hestia[name=HESTIA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5

+ 0 - 9
install/ubuntu/14.04/fail2ban/action.d/vesta.conf

@@ -1,9 +0,0 @@
-# Fail2Ban configuration file for vesta
-
-[Definition]
-
-actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
-actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
-actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
-actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
-actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>

+ 0 - 10
install/ubuntu/14.04/fail2ban/filter.d/vesta.conf

@@ -1,10 +0,0 @@
-# Fail2Ban filter for unsuccessful Vesta authentication attempts
-#
-
-[INCLUDES]
-before = common.conf
-
-[Definition]
-failregex =  .* <HOST> failed to login
-ignoreregex =
-

+ 8 - 20
install/ubuntu/14.04/fail2ban/jail.local

@@ -1,51 +1,39 @@
-[DEFAULT]
-ignoreip = 127.0.0.1/8
-
 [ssh-iptables]
 enabled  = true
 filter   = sshd
-action   = vesta[name=SSH]
+action   = hestia[name=SSH]
 logpath  = /var/log/auth.log
 maxretry = 5
 
 [vsftpd-iptables]
 enabled  = false
 filter   = vsftpd
-action   = vesta[name=FTP]
+action   = hestia[name=FTP]
 logpath  = /var/log/vsftpd.log
 maxretry = 5
 
 [exim-iptables]
 enabled = true
 filter  = exim
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/exim4/mainlog
-maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/dovecot.log
-maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
 filter   = mysqld-auth
-action   = vesta[name=DB]
+action   = hestia[name=DB]
 logpath  = /var/log/mysql.log
 maxretry = 5
 
-[vesta-iptables]
+[hestia-iptables]
 enabled = true
-filter  = vesta
-action  = vesta[name=VESTA]
+filter  = hestia
+action  = hestia[name=HESTIA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
-
-[roundcube-auth]
-enabled  = false
-filter   = roundcube-auth
-port     = http,https
-logpath  = /var/log/roundcube/errors
-maxretry = 5

+ 0 - 9
install/ubuntu/14.10/fail2ban/action.d/vesta.conf

@@ -1,9 +0,0 @@
-# Fail2Ban configuration file for vesta
-
-[Definition]
-
-actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
-actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
-actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
-actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
-actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>

+ 0 - 10
install/ubuntu/14.10/fail2ban/filter.d/vesta.conf

@@ -1,10 +0,0 @@
-# Fail2Ban filter for unsuccessful Vesta authentication attempts
-#
-
-[INCLUDES]
-before = common.conf
-
-[Definition]
-failregex =  .* <HOST> failed to login
-ignoreregex =
-

+ 8 - 20
install/ubuntu/14.10/fail2ban/jail.local

@@ -1,51 +1,39 @@
-[DEFAULT]
-ignoreip = 127.0.0.1/8
-
 [ssh-iptables]
 enabled  = true
 filter   = sshd
-action   = vesta[name=SSH]
+action   = hestia[name=SSH]
 logpath  = /var/log/auth.log
 maxretry = 5
 
 [vsftpd-iptables]
 enabled  = false
 filter   = vsftpd
-action   = vesta[name=FTP]
+action   = hestia[name=FTP]
 logpath  = /var/log/vsftpd.log
 maxretry = 5
 
 [exim-iptables]
 enabled = true
 filter  = exim
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/exim4/mainlog
-maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/dovecot.log
-maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
 filter   = mysqld-auth
-action   = vesta[name=DB]
+action   = hestia[name=DB]
 logpath  = /var/log/mysql.log
 maxretry = 5
 
-[vesta-iptables]
+[hestia-iptables]
 enabled = true
-filter  = vesta
-action  = vesta[name=VESTA]
+filter  = hestia
+action  = hestia[name=HESTIA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
-
-[roundcube-auth]
-enabled  = false
-filter   = roundcube-auth
-port     = http,https
-logpath  = /var/log/roundcube/errors
-maxretry = 5

+ 0 - 9
install/ubuntu/15.04/fail2ban/action.d/vesta.conf

@@ -1,9 +0,0 @@
-# Fail2Ban configuration file for vesta
-
-[Definition]
-
-actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
-actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
-actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
-actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
-actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>

+ 0 - 10
install/ubuntu/15.04/fail2ban/filter.d/vesta.conf

@@ -1,10 +0,0 @@
-# Fail2Ban filter for unsuccessful Vesta authentication attempts
-#
-
-[INCLUDES]
-before = common.conf
-
-[Definition]
-failregex =  .* <HOST> failed to login
-ignoreregex =
-

+ 8 - 20
install/ubuntu/15.04/fail2ban/jail.local

@@ -1,51 +1,39 @@
-[DEFAULT]
-ignoreip = 127.0.0.1/8
-
 [ssh-iptables]
 enabled  = true
 filter   = sshd
-action   = vesta[name=SSH]
+action   = hestia[name=SSH]
 logpath  = /var/log/auth.log
 maxretry = 5
 
 [vsftpd-iptables]
 enabled  = false
 filter   = vsftpd
-action   = vesta[name=FTP]
+action   = hestia[name=FTP]
 logpath  = /var/log/vsftpd.log
 maxretry = 5
 
 [exim-iptables]
 enabled = true
 filter  = exim
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/exim4/mainlog
-maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/dovecot.log
-maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
 filter   = mysqld-auth
-action   = vesta[name=DB]
+action   = hestia[name=DB]
 logpath  = /var/log/mysql.log
 maxretry = 5
 
-[vesta-iptables]
+[hestia-iptables]
 enabled = true
-filter  = vesta
-action  = vesta[name=VESTA]
+filter  = hestia
+action  = hestia[name=HESTIA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
-
-[roundcube-auth]
-enabled  = false
-filter   = roundcube-auth
-port     = http,https
-logpath  = /var/log/roundcube/errors
-maxretry = 5

+ 0 - 9
install/ubuntu/15.10/fail2ban/action.d/vesta.conf

@@ -1,9 +0,0 @@
-# Fail2Ban configuration file for vesta
-
-[Definition]
-
-actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
-actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
-actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
-actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
-actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>

+ 0 - 10
install/ubuntu/15.10/fail2ban/filter.d/vesta.conf

@@ -1,10 +0,0 @@
-# Fail2Ban filter for unsuccesfull Vesta authentication attempts
-#
-
-[INCLUDES]
-before = common.conf
-
-[Definition]
-failregex =  .* <HOST> failed to login
-ignoreregex =
-

+ 8 - 20
install/ubuntu/15.10/fail2ban/jail.local

@@ -1,51 +1,39 @@
-[DEFAULT]
-ignoreip = 127.0.0.1/8
-
 [ssh-iptables]
 enabled  = true
 filter   = sshd
-action   = vesta[name=SSH]
+action   = hestia[name=SSH]
 logpath  = /var/log/auth.log
 maxretry = 5
 
 [vsftpd-iptables]
 enabled  = false
 filter   = vsftpd
-action   = vesta[name=FTP]
+action   = hestia[name=FTP]
 logpath  = /var/log/vsftpd.log
 maxretry = 5
 
 [exim-iptables]
 enabled = true
 filter  = exim
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/exim4/mainlog
-maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/dovecot.log
-maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
 filter   = mysqld-auth
-action   = vesta[name=DB]
+action   = hestia[name=DB]
 logpath  = /var/log/mysql.log
 maxretry = 5
 
-[vesta-iptables]
+[hestia-iptables]
 enabled = true
-filter  = vesta
-action  = vesta[name=VESTA]
+filter  = hestia
+action  = hestia[name=HESTIA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
-
-[roundcube-auth]
-enabled  = false
-filter   = roundcube-auth
-port     = http,https
-logpath  = /var/log/roundcube/errors
-maxretry = 5

+ 0 - 9
install/ubuntu/16.04/fail2ban/action.d/vesta.conf

@@ -1,9 +0,0 @@
-# Fail2Ban configuration file for vesta
-
-[Definition]
-
-actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
-actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
-actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
-actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
-actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>

+ 0 - 10
install/ubuntu/16.04/fail2ban/filter.d/vesta.conf

@@ -1,10 +0,0 @@
-# Fail2Ban filter for unsuccesfull Vesta authentication attempts
-#
-
-[INCLUDES]
-before = common.conf
-
-[Definition]
-failregex =  .* <HOST> failed to login
-ignoreregex =
-

+ 8 - 20
install/ubuntu/16.04/fail2ban/jail.local

@@ -1,51 +1,39 @@
-[DEFAULT]
-ignoreip = 127.0.0.1/8
-
 [ssh-iptables]
 enabled  = true
 filter   = sshd
-action   = vesta[name=SSH]
+action   = hestia[name=SSH]
 logpath  = /var/log/auth.log
 maxretry = 5
 
 [vsftpd-iptables]
 enabled  = false
 filter   = vsftpd
-action   = vesta[name=FTP]
+action   = hestia[name=FTP]
 logpath  = /var/log/vsftpd.log
 maxretry = 5
 
 [exim-iptables]
 enabled = true
 filter  = exim
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/exim4/mainlog
-maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/dovecot.log
-maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
 filter   = mysqld-auth
-action   = vesta[name=DB]
+action   = hestia[name=DB]
 logpath  = /var/log/mysql.log
 maxretry = 5
 
-[vesta-iptables]
+[hestia-iptables]
 enabled = true
-filter  = vesta
-action  = vesta[name=VESTA]
+filter  = hestia
+action  = hestia[name=HESTIA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
-
-[roundcube-auth]
-enabled  = false
-filter   = roundcube-auth
-port     = http,https
-logpath  = /var/log/roundcube/errors
-maxretry = 5

+ 0 - 9
install/ubuntu/16.10/fail2ban/action.d/vesta.conf

@@ -1,9 +0,0 @@
-# Fail2Ban configuration file for vesta
-
-[Definition]
-
-actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
-actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
-actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
-actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
-actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>

+ 0 - 10
install/ubuntu/16.10/fail2ban/filter.d/vesta.conf

@@ -1,10 +0,0 @@
-# Fail2Ban filter for unsuccesfull Vesta authentication attempts
-#
-
-[INCLUDES]
-before = common.conf
-
-[Definition]
-failregex =  .* <HOST> failed to login
-ignoreregex =
-

+ 8 - 20
install/ubuntu/16.10/fail2ban/jail.local

@@ -1,51 +1,39 @@
-[DEFAULT]
-ignoreip = 127.0.0.1/8
-
 [ssh-iptables]
 enabled  = true
 filter   = sshd
-action   = vesta[name=SSH]
+action   = hestia[name=SSH]
 logpath  = /var/log/auth.log
 maxretry = 5
 
 [vsftpd-iptables]
 enabled  = false
 filter   = vsftpd
-action   = vesta[name=FTP]
+action   = hestia[name=FTP]
 logpath  = /var/log/vsftpd.log
 maxretry = 5
 
 [exim-iptables]
 enabled = true
 filter  = exim
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/exim4/mainlog
-maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/dovecot.log
-maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
 filter   = mysqld-auth
-action   = vesta[name=DB]
+action   = hestia[name=DB]
 logpath  = /var/log/mysql.log
 maxretry = 5
 
-[vesta-iptables]
+[hestia-iptables]
 enabled = true
-filter  = vesta
-action  = vesta[name=VESTA]
+filter  = hestia
+action  = hestia[name=HESTIA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
-
-[roundcube-auth]
-enabled  = false
-filter   = roundcube-auth
-port     = http,https
-logpath  = /var/log/roundcube/errors
-maxretry = 5

+ 0 - 9
install/ubuntu/17.04/fail2ban/action.d/vesta.conf

@@ -1,9 +0,0 @@
-# Fail2Ban configuration file for vesta
-
-[Definition]
-
-actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
-actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
-actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
-actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
-actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>

+ 0 - 10
install/ubuntu/17.04/fail2ban/filter.d/vesta.conf

@@ -1,10 +0,0 @@
-# Fail2Ban filter for unsuccesfull Vesta authentication attempts
-#
-
-[INCLUDES]
-before = common.conf
-
-[Definition]
-failregex =  .* <HOST> failed to login
-ignoreregex =
-

+ 8 - 20
install/ubuntu/17.04/fail2ban/jail.local

@@ -1,51 +1,39 @@
-[DEFAULT]
-ignoreip = 127.0.0.1/8
-
 [ssh-iptables]
 enabled  = true
 filter   = sshd
-action   = vesta[name=SSH]
+action   = hestia[name=SSH]
 logpath  = /var/log/auth.log
 maxretry = 5
 
 [vsftpd-iptables]
 enabled  = false
 filter   = vsftpd
-action   = vesta[name=FTP]
+action   = hestia[name=FTP]
 logpath  = /var/log/vsftpd.log
 maxretry = 5
 
 [exim-iptables]
 enabled = true
 filter  = exim
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/exim4/mainlog
-maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/dovecot.log
-maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
 filter   = mysqld-auth
-action   = vesta[name=DB]
+action   = hestia[name=DB]
 logpath  = /var/log/mysql.log
 maxretry = 5
 
-[vesta-iptables]
+[hestia-iptables]
 enabled = true
-filter  = vesta
-action  = vesta[name=VESTA]
+filter  = hestia
+action  = hestia[name=HESTIA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
-
-[roundcube-auth]
-enabled  = false
-filter   = roundcube-auth
-port     = http,https
-logpath  = /var/log/roundcube/errors
-maxretry = 5

+ 0 - 9
install/ubuntu/17.10/fail2ban/action.d/vesta.conf

@@ -1,9 +0,0 @@
-# Fail2Ban configuration file for vesta
-
-[Definition]
-
-actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
-actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
-actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
-actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
-actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>

+ 0 - 10
install/ubuntu/17.10/fail2ban/filter.d/vesta.conf

@@ -1,10 +0,0 @@
-# Fail2Ban filter for unsuccesfull Vesta authentication attempts
-#
-
-[INCLUDES]
-before = common.conf
-
-[Definition]
-failregex =  .* <HOST> failed to login
-ignoreregex =
-

+ 8 - 20
install/ubuntu/17.10/fail2ban/jail.local

@@ -1,51 +1,39 @@
-[DEFAULT]
-ignoreip = 127.0.0.1/8
-
 [ssh-iptables]
 enabled  = true
 filter   = sshd
-action   = vesta[name=SSH]
+action   = hestia[name=SSH]
 logpath  = /var/log/auth.log
 maxretry = 5
 
 [vsftpd-iptables]
 enabled  = false
 filter   = vsftpd
-action   = vesta[name=FTP]
+action   = hestia[name=FTP]
 logpath  = /var/log/vsftpd.log
 maxretry = 5
 
 [exim-iptables]
 enabled = true
 filter  = exim
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/exim4/mainlog
-maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/dovecot.log
-maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
 filter   = mysqld-auth
-action   = vesta[name=DB]
+action   = hestia[name=DB]
 logpath  = /var/log/mysql.log
 maxretry = 5
 
-[vesta-iptables]
+[hestia-iptables]
 enabled = true
-filter  = vesta
-action  = vesta[name=VESTA]
+filter  = hestia
+action  = hestia[name=HESTIA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
-
-[roundcube-auth]
-enabled  = false
-filter   = roundcube-auth
-port     = http,https
-logpath  = /var/log/roundcube/errors
-maxretry = 5

+ 0 - 9
install/ubuntu/18.04/fail2ban/action.d/vesta.conf

@@ -1,9 +0,0 @@
-# Fail2Ban configuration file for vesta
-
-[Definition]
-
-actionstart = /usr/local/vesta/bin/v-add-firewall-chain <name>
-actionstop = /usr/local/vesta/bin/v-delete-firewall-chain <name>
-actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
-actionban = /usr/local/vesta/bin/v-add-firewall-ban <ip> <name>
-actionunban = /usr/local/vesta/bin/v-delete-firewall-ban <ip> <name>

+ 0 - 10
install/ubuntu/18.04/fail2ban/filter.d/vesta.conf

@@ -1,10 +0,0 @@
-# Fail2Ban filter for unsuccesfull Vesta authentication attempts
-#
-
-[INCLUDES]
-before = common.conf
-
-[Definition]
-failregex =  .* <HOST> failed to login
-ignoreregex =
-

+ 8 - 20
install/ubuntu/18.04/fail2ban/jail.local

@@ -1,51 +1,39 @@
-[DEFAULT]
-ignoreip = 127.0.0.1/8
-
 [ssh-iptables]
 enabled  = true
 filter   = sshd
-action   = vesta[name=SSH]
+action   = hestia[name=SSH]
 logpath  = /var/log/auth.log
 maxretry = 5
 
 [vsftpd-iptables]
 enabled  = false
 filter   = vsftpd
-action   = vesta[name=FTP]
+action   = hestia[name=FTP]
 logpath  = /var/log/vsftpd.log
 maxretry = 5
 
 [exim-iptables]
 enabled = true
 filter  = exim
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/exim4/mainlog
-maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
-action  = vesta[name=MAIL]
+action  = hestia[name=MAIL]
 logpath = /var/log/dovecot.log
-maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
 filter   = mysqld-auth
-action   = vesta[name=DB]
+action   = hestia[name=DB]
 logpath  = /var/log/mysql.log
 maxretry = 5
 
-[vesta-iptables]
+[hestia-iptables]
 enabled = true
-filter  = vesta
-action  = vesta[name=VESTA]
+filter  = hestia
+action  = hestia[name=HESTIA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
-
-[roundcube-auth]
-enabled  = false
-filter   = roundcube-auth
-port     = http,https
-logpath  = /var/log/roundcube/errors
-maxretry = 5