msb/base-stack
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Compare commits

base: msb:c40ff90434c35e895190db7f1216c1dcd42d86c5
Branches Tags
msb:master
...
compare: msb:47b398a778543be4c7fd91adb7a3a0cc8cbeb206
Branches Tags
msb:master

2 Commits
c40ff90434 ... 47b398a778

Author SHA1 Message Date
Matthew Saunders Brown
47b398a778 fixed, and renamed, firewall blacklist scripts 2022-12-20 14:49:52 -08:00
Matthew Saunders Brown
e0e9b2ef03 harden up f2b ssh 2022-12-16 11:22:06 -08:00
3 changed files with 5 additions and 2 deletions
Show Stats Expand all files Collapse all files

3
install.sh
View File

@ -101,6 +101,9 @@ chmod 644 fail2ban/*.local
chmod 644 fail2ban/*/*.conf chmod 644 fail2ban/*/*.conf
cp -a fail2ban/* /etc/fail2ban/ cp -a fail2ban/* /etc/fail2ban/
echo "destemail = $WEBMASTER" >> /etc/fail2ban/jail.local echo "destemail = $WEBMASTER" >> /etc/fail2ban/jail.local
echo "bantime = 24h" >> /etc/fail2ban/jail.d/defaults-debian.conf
echo "maxretry = 3" >> /etc/fail2ban/jail.d/defaults-debian.conf
echo "logpath = /var/log/auth.log tail" >> /etc/fail2ban/jail.d/defaults-debian.conf
systemctl enable fail2ban systemctl enable fail2ban
systemctl start fail2ban systemctl start fail2ban

2
sbin/fbl.sh → sbin/firewall-blacklist-add.sh
View File

@ -8,7 +8,7 @@ else
exit 1 exit 1
fi fi
if [[ firewall-cmd --ipset=blacklist --query-entry $IP >/dev/null ]]; then if [[ `firewall-cmd --ipset=blacklist --query-entry $IP` = "yes" ]]; then
echo "IP $IP already in blacklist. Doing nothing." echo "IP $IP already in blacklist. Doing nothing."

2
sbin/fwl.sh → sbin/firewall-blacklist-rem.sh
View File

@ -8,7 +8,7 @@ else
exit 1 exit 1
fi fi
if [[ firewall-cmd --ipset=blacklist --query-entry $IP >/dev/null ]]; then if [[ `firewall-cmd --ipset=blacklist --query-entry $IP` = "yes" ]]; then
firewall-cmd --ipset=blacklist --remove-entry=$IP firewall-cmd --ipset=blacklist --remove-entry=$IP
firewall-cmd --permanent --ipset=blacklist --remove-entry=$IP firewall-cmd --permanent --ipset=blacklist --remove-entry=$IP