Fail2ban service description


Fail2Ban is an intrusion prevention software framework that protects computer servers from brute-force attacks. Written in the Python programming language, it is able to run on POSIX systems that have an interface to a packet-control system or firewall installed locally, for example, iptables or TCP Wrapper.

Go to TOP

Fail2ban Functionality

Fail2Ban operates by monitoring log files (i.e. /var/log/secure.log, /var/www/roxy-wi/log/roxy-wi.log, etc.) for selected entries and running scripts based on them. Most commonly this is used to block selected IP addresses that may belong to hosts that are trying to breach the system's security. It can ban any host IP address that makes too many login attempts or performs any other unwanted action within a time frame defined by the administrator. Includes support for both IPv4 and IPv6. Optionally longer bans can be custom-configured for "recidivist" abusers that keep coming back. Fail2Ban is typically set up to unban a blocked host within a certain period, so as to not "lock out" any genuine connections that may have been temporarily misconfigured. However, an unban time of several minutes is usually enough to stop a network connection being flooded by malicious connections, as well as reducing the likelihood of a successful dictionary attack.

Go to TOP

Fail2ban with Roxy-WI

Roxy-WI supports Fail2ban since v4.3.0. By default Fail2ban protects SSH, Roxy-WI and Apache against various brute-force attacks.

Fail2ban is disabled by default. If you would like to enable the protection of Roxy-WI server you should enable it in the "Admin Area" on the "Services" page.

Go to TOP

Was this article helpful?

Yes, thanks!
Not really
Go to TOP
Go back