Benutzer-Werkzeuge

Webseiten-Werkzeuge


tachtler:fail2ban

Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

Link zu dieser Vergleichsansicht

Beide Seiten der vorigen RevisionVorhergehende Überarbeitung
Nächste Überarbeitung
Vorhergehende Überarbeitung
tachtler:fail2ban [2013/01/04 10:23] – [/etc/fail2ban/fail2ban.conf] klaustachtler:fail2ban [2018/04/15 00:57] (aktuell) – [IP-Adresse manuell löschen unban] klaus
Zeile 21: Zeile 21:
  
 Die Installation des **rpm**-Paktes **''jwhois''** kann über den Paket-Manager **''yum''** nachfolgender Befehl durchgeführt werden: Die Installation des **rpm**-Paktes **''jwhois''** kann über den Paket-Manager **''yum''** nachfolgender Befehl durchgeführt werden:
 +
 +**__CentOS 6:__**
 +
 <code> <code>
 # yum install jwhois # yum install jwhois
Zeile 57: Zeile 60:
 Installed: Installed:
   jwhois.x86_64 0:4.0-19.el6                                                       jwhois.x86_64 0:4.0-19.el6                                                    
 +
 +Complete!
 +</code>
 +
 +**__CentOS 7:__**
 +
 +<code>
 +# yum install jwhois
 +Loaded plugins: changelog, priorities
 +125 packages excluded due to repository priority protections
 +Resolving Dependencies
 +--> Running transaction check
 +---> Package jwhois.x86_64 0:4.0-45.el7 will be installed
 +--> Processing Dependency: libidn2.so.0(IDN2_0.0.0)(64bit) for package: jwhois-4.0-45.el7.x86_64
 +--> Processing Dependency: libidn2.so.0()(64bit) for package: jwhois-4.0-45.el7.x86_64
 +--> Running transaction check
 +---> Package libidn2.x86_64 0:0.10-2.el7 will be installed
 +--> Finished Dependency Resolution
 +
 +Changes in packages about to be updated:
 +
 +
 +Dependencies Resolved
 +
 +================================================================================
 + Package           Arch             Version                Repository      Size
 +================================================================================
 +Installing:
 + jwhois            x86_64           4.0-45.el7             epel           116 k
 +Installing for dependencies:
 + libidn2           x86_64           0.10-2.el7             epel            96 k
 +
 +Transaction Summary
 +================================================================================
 +Install  1 Package (+1 Dependent package)
 +
 +Total download size: 212 k
 +Installed size: 633 k
 +Is this ok [y/d/N]: y
 +Downloading packages:
 +(1/2): jwhois-4.0-45.el7.x86_64.rpm                        | 116 kB   00:00     
 +(2/2): libidn2-0.10-2.el7.x86_64.rpm                        96 kB   00:00     
 +--------------------------------------------------------------------------------
 +Total                                              1.0 MB/s | 212 kB  00:00     
 +Running transaction check
 +Running transaction test
 +Transaction test succeeded
 +Running transaction
 +  Installing : libidn2-0.10-2.el7.x86_64                                    1/2 
 +  Installing : jwhois-4.0-45.el7.x86_64                                     2/
 +  Verifying  : libidn2-0.10-2.el7.x86_64                                    1/2 
 +  Verifying  : jwhois-4.0-45.el7.x86_64                                     2/
 +
 +Installed:
 +  jwhois.x86_64 0:4.0-45.el7                                                    
 +
 +Dependency Installed:
 +  libidn2.x86_64 0:0.10-2.el7                                                   
  
 Complete! Complete!
Zeile 62: Zeile 123:
  
 Der Inhalt des Paketes **''jwhois.x86_64''** kann mit nachfolgendem Befehl angezeigt werden: Der Inhalt des Paketes **''jwhois.x86_64''** kann mit nachfolgendem Befehl angezeigt werden:
 +
 +**__CentOS 6:__**
 +
 <code> <code>
 # rpm -qil jwhois # rpm -qil jwhois
Zeile 107: Zeile 171:
 </code> </code>
  
 +**__CentOS 7:__**
 +
 +<code>
 +# rpm -qil jwhois
 +Name        : jwhois
 +Version     : 4.0
 +Release     : 45.el7
 +Architecture: x86_64
 +Install Date: Mon 12 Sep 2016 01:19:47 PM CEST
 +Group       : Applications/Internet
 +Size        : 343812
 +License     : GPLv3
 +Signature   : RSA/SHA256, Mon 08 Aug 2016 06:27:27 PM CEST, Key ID 6a2faea2352c64e5
 +Source RPM  : jwhois-4.0-45.el7.src.rpm
 +Build Date  : Mon 08 Aug 2016 01:18:56 PM CEST
 +Build Host  : buildvm-26.phx2.fedoraproject.org
 +Relocations : (not relocatable)
 +Packager    : Fedora Project
 +Vendor      : Fedora Project
 +URL         : http://www.gnu.org/software/jwhois/
 +Summary     : Internet whois/nicname client
 +Description :
 +A whois client that accepts both traditional and finger-style queries.
 +/etc/jwhois.conf
 +/usr/bin/jwhois
 +/usr/bin/whois
 +/usr/share/doc/jwhois-4.0
 +/usr/share/doc/jwhois-4.0/AUTHORS
 +/usr/share/doc/jwhois-4.0/COPYING
 +/usr/share/doc/jwhois-4.0/ChangeLog
 +/usr/share/doc/jwhois-4.0/NEWS
 +/usr/share/doc/jwhois-4.0/README
 +/usr/share/doc/jwhois-4.0/TODO
 +/usr/share/info/jwhois.info.gz
 +/usr/share/locale/es/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/fr/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/hu/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/id/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/it/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/nl/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/pl/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/pt_BR/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/ro/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/ru/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/rw/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/sv/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/tr/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/vi/LC_MESSAGES/jwhois.mo
 +/usr/share/locale/zh_TW/LC_MESSAGES/jwhois.mo
 +/usr/share/man/man1/jwhois.1.gz
 +/usr/share/man/man1/whois.1.gz
 +/usr/share/man/man1/whois.jwhois.1.gz
 +/usr/share/man/sv/man1/jwhois.1.gz
 +</code>
 ==== EPEL-Repository einbinden ==== ==== EPEL-Repository einbinden ====
  
Zeile 337: Zeile 455:
  
 Die Installation von **[[http://www.fail2ban.org|fail2ban]]** kann über den Paket-Manager **''yum''** mit nachfolgenden Befehl durchgeführt werden: Die Installation von **[[http://www.fail2ban.org|fail2ban]]** kann über den Paket-Manager **''yum''** mit nachfolgenden Befehl durchgeführt werden:
 +
 +**__CentOS 6:__**
 +
 <code> <code>
 # yum install fail2ban # yum install fail2ban
Zeile 413: Zeile 534:
   python-inotify.noarch 0:0.9.1-1.el6   shorewall.noarch 0:4.5.4-1.el6            python-inotify.noarch 0:0.9.1-1.el6   shorewall.noarch 0:4.5.4-1.el6         
   shorewall-core.noarch 0:4.5.4-1.el6     shorewall-core.noarch 0:4.5.4-1.el6  
 +
 +Complete!
 +</code>
 +
 +**__CentOS 7:__**
 +
 +:!: **HINWEIS** - **Es soll auch unter [[http://www.centos.org|CentOS 7]] - ''iptables'' zum Einsatz kommen und __nicht__ ''firewalld'' !**
 +
 +<code>
 +# yum install fail2ban-server fail2ban-systemd fail2ban-mail
 +Loaded plugins: changelog, priorities
 +125 packages excluded due to repository priority protections
 +Resolving Dependencies
 +--> Running transaction check
 +---> Package fail2ban-mail.noarch 0:0.9.3-1.el7 will be installed
 +--> Processing Dependency: mailx for package: fail2ban-mail-0.9.3-1.el7.noarch
 +---> Package fail2ban-server.noarch 0:0.9.3-1.el7 will be installed
 +--> Processing Dependency: systemd-python for package: fail2ban-server-0.9.3-1.el7.noarch
 +--> Processing Dependency: ipset for package: fail2ban-server-0.9.3-1.el7.noarch
 +---> Package fail2ban-systemd.noarch 0:0.9.3-1.el7 will be installed
 +--> Running transaction check
 +---> Package ipset.x86_64 0:6.19-4.el7 will be installed
 +--> Processing Dependency: ipset-libs = 6.19-4.el7 for package: ipset-6.19-4.el7.x86_64
 +--> Processing Dependency: libipset.so.3(LIBIPSET_3.0)(64bit) for package: ipset-6.19-4.el7.x86_64
 +--> Processing Dependency: libipset.so.3(LIBIPSET_2.0)(64bit) for package: ipset-6.19-4.el7.x86_64
 +--> Processing Dependency: libipset.so.3(LIBIPSET_1.0)(64bit) for package: ipset-6.19-4.el7.x86_64
 +--> Processing Dependency: libipset.so.3()(64bit) for package: ipset-6.19-4.el7.x86_64
 +---> Package mailx.x86_64 0:12.5-12.el7_0 will be installed
 +---> Package systemd-python.x86_64 0:219-19.el7_2.12 will be installed
 +--> Running transaction check
 +---> Package ipset-libs.x86_64 0:6.19-4.el7 will be installed
 +--> Finished Dependency Resolution
 +
 +Changes in packages about to be updated:
 +
 +
 +Dependencies Resolved
 +
 +================================================================================
 + Package                Arch         Version                Repository     Size
 +================================================================================
 +Installing:
 + fail2ban-mail          noarch       0.9.3-1.el7            epel           13 k
 + fail2ban-server        noarch       0.9.3-1.el7            epel          395 k
 + fail2ban-systemd       noarch       0.9.3-1.el7            epel          9.9 k
 +Installing for dependencies:
 + ipset                  x86_64       6.19-4.el7             base           36 k
 + ipset-libs             x86_64       6.19-4.el7             base           46 k
 + mailx                  x86_64       12.5-12.el7_0          base          244 k
 + systemd-python         x86_64       219-19.el7_2.12        updates        99 k
 +
 +Transaction Summary
 +================================================================================
 +Install  3 Packages (+4 Dependent packages)
 +
 +Total download size: 843 k
 +Installed size: 2.2 M
 +Is this ok [y/d/N]: y
 +Downloading packages:
 +(1/7): fail2ban-mail-0.9.3-1.el7.noarch.rpm                |  13 kB   00:00     
 +(2/7): fail2ban-server-0.9.3-1.el7.noarch.rpm              | 395 kB   00:00     
 +(3/7): fail2ban-systemd-0.9.3-1.el7.noarch.rpm             | 9.9 kB   00:00     
 +(4/7): ipset-6.19-4.el7.x86_64.rpm                          36 kB   00:00     
 +(5/7): ipset-libs-6.19-4.el7.x86_64.rpm                    |  46 kB   00:00     
 +(6/7): mailx-12.5-12.el7_0.x86_64.rpm                      | 244 kB   00:00     
 +(7/7): systemd-python-219-19.el7_2.12.x86_64.rpm            99 kB   00:00     
 +--------------------------------------------------------------------------------
 +Total                                              1.1 MB/s | 843 kB  00:00     
 +Running transaction check
 +Running transaction test
 +Transaction test succeeded
 +Running transaction
 +  Installing : systemd-python-219-19.el7_2.12.x86_64                        1/7 
 +  Installing : mailx-12.5-12.el7_0.x86_64                                   2/
 +  Installing : ipset-libs-6.19-4.el7.x86_64                                 3/
 +  Installing : ipset-6.19-4.el7.x86_64                                      4/7 
 +  Installing : fail2ban-server-0.9.3-1.el7.noarch                           5/
 +  Installing : fail2ban-mail-0.9.3-1.el7.noarch                             6/
 +  Installing : fail2ban-systemd-0.9.3-1.el7.noarch                          7/7 
 +  Verifying  : ipset-libs-6.19-4.el7.x86_64                                 1/
 +  Verifying  : ipset-6.19-4.el7.x86_64                                      2/7 
 +  Verifying  : fail2ban-server-0.9.3-1.el7.noarch                           3/
 +  Verifying  : fail2ban-mail-0.9.3-1.el7.noarch                             4/
 +  Verifying  : fail2ban-systemd-0.9.3-1.el7.noarch                          5/7 
 +  Verifying  : mailx-12.5-12.el7_0.x86_64                                   6/
 +  Verifying  : systemd-python-219-19.el7_2.12.x86_64                        7/7 
 +
 +Installed:
 +  fail2ban-mail.noarch 0:0.9.3-1.el7      fail2ban-server.noarch 0:0.9.3-1.el7  
 +  fail2ban-systemd.noarch 0:0.9.3-1.el7  
 +
 +Dependency Installed:
 +  ipset.x86_64 0:6.19-4.el7         ipset-libs.x86_64 0:6.19-4.el7              
 +  mailx.x86_64 0:12.5-12.el7_0      systemd-python.x86_64 0:219-19.el7_2.12     
  
 Complete! Complete!
Zeile 418: Zeile 633:
  
 Der Inhalt des Paketes **''fail2ban.noarch''** kann mit nachfolgendem Befehl angezeigt werden: Der Inhalt des Paketes **''fail2ban.noarch''** kann mit nachfolgendem Befehl angezeigt werden:
 +
 +**__CentOS 6:__**
 +
 <code> <code>
 # rpm -qil fail2ban # rpm -qil fail2ban
Zeile 620: Zeile 838:
 </code> </code>
  
 +Der Inhalt der Pakete **''fail2ban-server.noarch''**, **''fail2ban-systemd.noarch''** und **''fail2ban-mail.noarch''** kann mit nachfolgenden Befehlen angezeigt werden: 
 +
 +**__CentOS 7:__**
 +
 +<code>
 +# rpm -qil fail2ban-server fail2ban-systemd fail2ban-mail
 +Name        : fail2ban-server
 +Version     : 0.9.3
 +Release     : 1.el7
 +Architecture: noarch
 +Install Date: Mon 12 Sep 2016 01:32:27 PM CEST
 +Group       : Unspecified
 +Size        : 1378539
 +License     : GPLv2+
 +Signature   : RSA/SHA256, Sun 13 Sep 2015 06:58:28 PM CEST, Key ID 6a2faea2352c64e5
 +Source RPM  : fail2ban-0.9.3-1.el7.src.rpm
 +Build Date  : Sat 12 Sep 2015 11:19:16 PM CEST
 +Build Host  : buildvm-04.phx2.fedoraproject.org
 +Relocations : (not relocatable)
 +Packager    : Fedora Project
 +Vendor      : Fedora Project
 +URL         : http://fail2ban.sourceforge.net/
 +Summary     : Core server component for Fail2Ban
 +Description :
 +This package contains the core server components for Fail2Ban with minimal
 +dependencies.  You can install this directly if you want to have a small
 +installation and know what you are doing.
 +/etc/fail2ban
 +/etc/fail2ban/action.d
 +/etc/fail2ban/action.d/apf.conf
 +/etc/fail2ban/action.d/badips.conf
 +/etc/fail2ban/action.d/badips.py
 +/etc/fail2ban/action.d/badips.pyc
 +/etc/fail2ban/action.d/badips.pyo
 +/etc/fail2ban/action.d/blocklist_de.conf
 +/etc/fail2ban/action.d/cloudflare.conf
 +/etc/fail2ban/action.d/dshield.conf
 +/etc/fail2ban/action.d/dummy.conf
 +/etc/fail2ban/action.d/firewallcmd-allports.conf
 +/etc/fail2ban/action.d/firewallcmd-ipset.conf
 +/etc/fail2ban/action.d/firewallcmd-multiport.conf
 +/etc/fail2ban/action.d/firewallcmd-new.conf
 +/etc/fail2ban/action.d/iptables-allports.conf
 +/etc/fail2ban/action.d/iptables-common.conf
 +/etc/fail2ban/action.d/iptables-ipset-proto4.conf
 +/etc/fail2ban/action.d/iptables-ipset-proto6-allports.conf
 +/etc/fail2ban/action.d/iptables-ipset-proto6.conf
 +/etc/fail2ban/action.d/iptables-multiport-log.conf
 +/etc/fail2ban/action.d/iptables-multiport.conf
 +/etc/fail2ban/action.d/iptables-new.conf
 +/etc/fail2ban/action.d/iptables-xt_recent-echo.conf
 +/etc/fail2ban/action.d/iptables.conf
 +/etc/fail2ban/action.d/mail.conf
 +/etc/fail2ban/action.d/mynetwatchman.conf
 +/etc/fail2ban/action.d/nsupdate.conf
 +/etc/fail2ban/action.d/route.conf
 +/etc/fail2ban/action.d/sendmail.conf
 +/etc/fail2ban/action.d/shorewall-ipset-proto6.conf
 +/etc/fail2ban/action.d/smtp.py
 +/etc/fail2ban/action.d/smtp.pyc
 +/etc/fail2ban/action.d/smtp.pyo
 +/etc/fail2ban/action.d/symbiosis-blacklist-allports.conf
 +/etc/fail2ban/action.d/xarf-login-attack.conf
 +/etc/fail2ban/fail2ban.conf
 +/etc/fail2ban/fail2ban.d
 +/etc/fail2ban/filter.d
 +/etc/fail2ban/filter.d/3proxy.conf
 +/etc/fail2ban/filter.d/apache-auth.conf
 +/etc/fail2ban/filter.d/apache-badbots.conf
 +/etc/fail2ban/filter.d/apache-botsearch.conf
 +/etc/fail2ban/filter.d/apache-common.conf
 +/etc/fail2ban/filter.d/apache-fakegooglebot.conf
 +/etc/fail2ban/filter.d/apache-modsecurity.conf
 +/etc/fail2ban/filter.d/apache-nohome.conf
 +/etc/fail2ban/filter.d/apache-noscript.conf
 +/etc/fail2ban/filter.d/apache-overflows.conf
 +/etc/fail2ban/filter.d/apache-pass.conf
 +/etc/fail2ban/filter.d/apache-shellshock.conf
 +/etc/fail2ban/filter.d/assp.conf
 +/etc/fail2ban/filter.d/asterisk.conf
 +/etc/fail2ban/filter.d/botsearch-common.conf
 +/etc/fail2ban/filter.d/common.conf
 +/etc/fail2ban/filter.d/counter-strike.conf
 +/etc/fail2ban/filter.d/courier-auth.conf
 +/etc/fail2ban/filter.d/courier-smtp.conf
 +/etc/fail2ban/filter.d/cyrus-imap.conf
 +/etc/fail2ban/filter.d/directadmin.conf
 +/etc/fail2ban/filter.d/dovecot.conf
 +/etc/fail2ban/filter.d/dropbear.conf
 +/etc/fail2ban/filter.d/drupal-auth.conf
 +/etc/fail2ban/filter.d/ejabberd-auth.conf
 +/etc/fail2ban/filter.d/exim-common.conf
 +/etc/fail2ban/filter.d/exim-spam.conf
 +/etc/fail2ban/filter.d/exim.conf
 +/etc/fail2ban/filter.d/freeswitch.conf
 +/etc/fail2ban/filter.d/froxlor-auth.conf
 +/etc/fail2ban/filter.d/groupoffice.conf
 +/etc/fail2ban/filter.d/gssftpd.conf
 +/etc/fail2ban/filter.d/guacamole.conf
 +/etc/fail2ban/filter.d/horde.conf
 +/etc/fail2ban/filter.d/ignorecommands
 +/etc/fail2ban/filter.d/ignorecommands/apache-fakegooglebot
 +/etc/fail2ban/filter.d/kerio.conf
 +/etc/fail2ban/filter.d/lighttpd-auth.conf
 +/etc/fail2ban/filter.d/monit.conf
 +/etc/fail2ban/filter.d/mysqld-auth.conf
 +/etc/fail2ban/filter.d/nagios.conf
 +/etc/fail2ban/filter.d/named-refused.conf
 +/etc/fail2ban/filter.d/nginx-botsearch.conf
 +/etc/fail2ban/filter.d/nginx-http-auth.conf
 +/etc/fail2ban/filter.d/nsd.conf
 +/etc/fail2ban/filter.d/openwebmail.conf
 +/etc/fail2ban/filter.d/oracleims.conf
 +/etc/fail2ban/filter.d/pam-generic.conf
 +/etc/fail2ban/filter.d/perdition.conf
 +/etc/fail2ban/filter.d/php-url-fopen.conf
 +/etc/fail2ban/filter.d/portsentry.conf
 +/etc/fail2ban/filter.d/postfix-rbl.conf
 +/etc/fail2ban/filter.d/postfix-sasl.conf
 +/etc/fail2ban/filter.d/postfix.conf
 +/etc/fail2ban/filter.d/proftpd.conf
 +/etc/fail2ban/filter.d/pure-ftpd.conf
 +/etc/fail2ban/filter.d/qmail.conf
 +/etc/fail2ban/filter.d/recidive.conf
 +/etc/fail2ban/filter.d/roundcube-auth.conf
 +/etc/fail2ban/filter.d/selinux-common.conf
 +/etc/fail2ban/filter.d/selinux-ssh.conf
 +/etc/fail2ban/filter.d/sendmail-auth.conf
 +/etc/fail2ban/filter.d/sendmail-reject.conf
 +/etc/fail2ban/filter.d/sieve.conf
 +/etc/fail2ban/filter.d/sogo-auth.conf
 +/etc/fail2ban/filter.d/solid-pop3d.conf
 +/etc/fail2ban/filter.d/squid.conf
 +/etc/fail2ban/filter.d/squirrelmail.conf
 +/etc/fail2ban/filter.d/sshd-ddos.conf
 +/etc/fail2ban/filter.d/sshd.conf
 +/etc/fail2ban/filter.d/stunnel.conf
 +/etc/fail2ban/filter.d/suhosin.conf
 +/etc/fail2ban/filter.d/tine20.conf
 +/etc/fail2ban/filter.d/uwimap-auth.conf
 +/etc/fail2ban/filter.d/vsftpd.conf
 +/etc/fail2ban/filter.d/webmin-auth.conf
 +/etc/fail2ban/filter.d/wuftpd.conf
 +/etc/fail2ban/filter.d/xinetd-fail.conf
 +/etc/fail2ban/jail.conf
 +/etc/fail2ban/jail.d
 +/etc/fail2ban/paths-common.conf
 +/etc/fail2ban/paths-debian.conf
 +/etc/fail2ban/paths-fedora.conf
 +/etc/fail2ban/paths-freebsd.conf
 +/etc/fail2ban/paths-osx.conf
 +/etc/logrotate.d/fail2ban
 +/etc/tmpfiles.d/fail2ban.conf
 +/usr/bin/fail2ban-client
 +/usr/bin/fail2ban-regex
 +/usr/bin/fail2ban-server
 +/usr/bin/fail2ban-testcases
 +/usr/lib/python2.7/site-packages/fail2ban
 +/usr/lib/python2.7/site-packages/fail2ban-0.9.3-py2.7.egg-info
 +/usr/lib/python2.7/site-packages/fail2ban/__init__.py
 +/usr/lib/python2.7/site-packages/fail2ban/__init__.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/__init__.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/client
 +/usr/lib/python2.7/site-packages/fail2ban/client/__init__.py
 +/usr/lib/python2.7/site-packages/fail2ban/client/__init__.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/client/__init__.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/client/actionreader.py
 +/usr/lib/python2.7/site-packages/fail2ban/client/actionreader.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/client/actionreader.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/client/beautifier.py
 +/usr/lib/python2.7/site-packages/fail2ban/client/beautifier.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/client/beautifier.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/client/configparserinc.py
 +/usr/lib/python2.7/site-packages/fail2ban/client/configparserinc.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/client/configparserinc.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/client/configreader.py
 +/usr/lib/python2.7/site-packages/fail2ban/client/configreader.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/client/configreader.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/client/configurator.py
 +/usr/lib/python2.7/site-packages/fail2ban/client/configurator.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/client/configurator.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/client/csocket.py
 +/usr/lib/python2.7/site-packages/fail2ban/client/csocket.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/client/csocket.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/client/fail2banreader.py
 +/usr/lib/python2.7/site-packages/fail2ban/client/fail2banreader.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/client/fail2banreader.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/client/filterreader.py
 +/usr/lib/python2.7/site-packages/fail2ban/client/filterreader.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/client/filterreader.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/client/jailreader.py
 +/usr/lib/python2.7/site-packages/fail2ban/client/jailreader.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/client/jailreader.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/client/jailsreader.py
 +/usr/lib/python2.7/site-packages/fail2ban/client/jailsreader.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/client/jailsreader.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/exceptions.py
 +/usr/lib/python2.7/site-packages/fail2ban/exceptions.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/exceptions.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/helpers.py
 +/usr/lib/python2.7/site-packages/fail2ban/helpers.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/helpers.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/protocol.py
 +/usr/lib/python2.7/site-packages/fail2ban/protocol.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/protocol.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server
 +/usr/lib/python2.7/site-packages/fail2ban/server/__init__.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/__init__.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/__init__.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/action.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/action.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/action.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/actions.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/actions.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/actions.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/asyncserver.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/asyncserver.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/asyncserver.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/banmanager.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/banmanager.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/banmanager.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/database.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/database.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/database.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/datedetector.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/datedetector.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/datedetector.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/datetemplate.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/datetemplate.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/datetemplate.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/faildata.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/faildata.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/faildata.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/failmanager.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/failmanager.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/failmanager.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/failregex.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/failregex.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/failregex.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/filter.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/filter.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/filter.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/filtergamin.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/filtergamin.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/filtergamin.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/filterpoll.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/filterpoll.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/filterpoll.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/filterpyinotify.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/filterpyinotify.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/filterpyinotify.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/filtersystemd.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/filtersystemd.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/filtersystemd.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/jail.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/jail.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/jail.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/jails.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/jails.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/jails.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/jailthread.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/jailthread.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/jailthread.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/mytime.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/mytime.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/mytime.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/server.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/server.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/server.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/strptime.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/strptime.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/strptime.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/ticket.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/ticket.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/ticket.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/server/transmitter.py
 +/usr/lib/python2.7/site-packages/fail2ban/server/transmitter.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/server/transmitter.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests
 +/usr/lib/python2.7/site-packages/fail2ban/tests/__init__.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/__init__.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/__init__.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/action_d
 +/usr/lib/python2.7/site-packages/fail2ban/tests/action_d/__init__.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/action_d/__init__.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/action_d/__init__.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/action_d/test_badips.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/action_d/test_badips.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/action_d/test_badips.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/action_d/test_smtp.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/action_d/test_smtp.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/action_d/test_smtp.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/actionstestcase.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/actionstestcase.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/actionstestcase.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/actiontestcase.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/actiontestcase.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/actiontestcase.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/banmanagertestcase.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/banmanagertestcase.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/banmanagertestcase.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/config
 +/usr/lib/python2.7/site-packages/fail2ban/tests/config/action.d
 +/usr/lib/python2.7/site-packages/fail2ban/tests/config/action.d/brokenaction.conf
 +/usr/lib/python2.7/site-packages/fail2ban/tests/config/fail2ban.conf
 +/usr/lib/python2.7/site-packages/fail2ban/tests/config/filter.d
 +/usr/lib/python2.7/site-packages/fail2ban/tests/config/filter.d/simple.conf
 +/usr/lib/python2.7/site-packages/fail2ban/tests/config/filter.d/test.conf
 +/usr/lib/python2.7/site-packages/fail2ban/tests/config/filter.d/test.local
 +/usr/lib/python2.7/site-packages/fail2ban/tests/config/jail.conf
 +/usr/lib/python2.7/site-packages/fail2ban/tests/databasetestcase.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/databasetestcase.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/databasetestcase.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/datedetectortestcase.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/datedetectortestcase.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/datedetectortestcase.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/dummyjail.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/dummyjail.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/dummyjail.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/failmanagertestcase.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/failmanagertestcase.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/failmanagertestcase.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_checkainfo.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_checkainfo.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_checkainfo.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_errors.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_errors.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_errors.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_modifyainfo.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_modifyainfo.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_modifyainfo.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_noAction.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_noAction.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_noAction.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_nomethod.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_nomethod.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/action.d/action_nomethod.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/README
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/basic
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/basic/authz_owner
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/basic/authz_owner/.htaccess
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/basic/authz_owner/.htpasswd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/basic/authz_owner/cant_get_me.html
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/basic/file
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/basic/file/.htaccess
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/basic/file/.htpasswd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest/.htaccess
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest/.htpasswd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest_anon
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest_anon/.htaccess
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest_anon/.htpasswd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest_time
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest_time/.htaccess
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest_time/.htpasswd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest_wrongrelm
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest_wrongrelm/.htaccess
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/digest_wrongrelm/.htpasswd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/noentry
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/config/apache-auth/noentry/.htaccess
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/database_v1.db
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/filter.d
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/filter.d/substition.conf
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/filter.d/testcase-common.conf
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/filter.d/testcase01.conf
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/ignorecommand.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/ignorecommand.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/ignorecommand.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/3proxy
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/apache-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/apache-badbots
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/apache-botsearch
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/apache-fakegooglebot
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/apache-modsecurity
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/apache-nohome
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/apache-noscript
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/apache-overflows
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/apache-pass
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/apache-shellshock
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/assp
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/asterisk
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/bsd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/bsd/syslog-plain.txt
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/bsd/syslog-v.txt
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/bsd/syslog-vv.txt
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/counter-strike
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/courier-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/courier-smtp
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/cyrus-imap
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/directadmin
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/dovecot
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/dropbear
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/drupal-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/ejabberd-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/exim
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/exim-spam
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/freeswitch
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/froxlor-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/groupoffice
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/gssftpd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/guacamole
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/horde
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/kerio
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/lighttpd-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/monit
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/mysqld-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/nagios
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/named-refused
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/nginx-botsearch
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/nginx-http-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/nsd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/openwebmail
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/oracleims
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/pam-generic
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/perdition
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/php-url-fopen
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/portsentry
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/postfix
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/postfix-rbl
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/postfix-sasl
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/proftpd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/pure-ftpd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/qmail
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/recidive
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/roundcube-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/selinux-ssh
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/sendmail-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/sendmail-reject
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/sieve
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/sogo-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/solid-pop3d
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/squid
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/squirrelmail
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/sshd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/sshd-ddos
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/stunnel
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/suhosin
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/tine20
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/uwimap-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/vsftpd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/webmin-auth
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/wuftpd
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/logs/xinetd-fail
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/testcase-journal.log
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/testcase-multiline.log
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/testcase-usedns.log
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/testcase01.log
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/testcase02.log
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/testcase03.log
 +/usr/lib/python2.7/site-packages/fail2ban/tests/files/testcase04.log
 +/usr/lib/python2.7/site-packages/fail2ban/tests/filtertestcase.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/filtertestcase.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/filtertestcase.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/misctestcase.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/misctestcase.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/misctestcase.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/samplestestcase.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/samplestestcase.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/samplestestcase.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/servertestcase.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/servertestcase.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/servertestcase.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/sockettestcase.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/sockettestcase.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/sockettestcase.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/tests/utils.py
 +/usr/lib/python2.7/site-packages/fail2ban/tests/utils.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/tests/utils.pyo
 +/usr/lib/python2.7/site-packages/fail2ban/version.py
 +/usr/lib/python2.7/site-packages/fail2ban/version.pyc
 +/usr/lib/python2.7/site-packages/fail2ban/version.pyo
 +/usr/lib/systemd/system/fail2ban.service
 +/usr/share/doc/fail2ban-server-0.9.3
 +/usr/share/doc/fail2ban-server-0.9.3/COPYING
 +/usr/share/doc/fail2ban-server-0.9.3/ChangeLog
 +/usr/share/doc/fail2ban-server-0.9.3/README.md
 +/usr/share/doc/fail2ban-server-0.9.3/TODO
 +/usr/share/doc/fail2ban-server-0.9.3/requirements.txt
 +/usr/share/doc/fail2ban-server-0.9.3/run-rootless.txt
 +/usr/share/man/man1/fail2ban-client.1.gz
 +/usr/share/man/man1/fail2ban-regex.1.gz
 +/usr/share/man/man1/fail2ban-server.1.gz
 +/usr/share/man/man1/fail2ban-testcases.1.gz
 +/usr/share/man/man1/fail2ban.1.gz
 +/usr/share/man/man5/jail.conf.5.gz
 +/var/lib/fail2ban
 +/var/run/fail2ban
 +Name        : fail2ban-systemd
 +Version     : 0.9.3
 +Release     : 1.el7
 +Architecture: noarch
 +Install Date: Mon 12 Sep 2016 01:32:28 PM CEST
 +Group       : Unspecified
 +Size        : 272
 +License     : GPLv2+
 +Signature   : RSA/SHA256, Sun 13 Sep 2015 06:58:13 PM CEST, Key ID 6a2faea2352c64e5
 +Source RPM  : fail2ban-0.9.3-1.el7.src.rpm
 +Build Date  : Sat 12 Sep 2015 11:19:16 PM CEST
 +Build Host  : buildvm-04.phx2.fedoraproject.org
 +Relocations : (not relocatable)
 +Packager    : Fedora Project
 +Vendor      : Fedora Project
 +URL         : http://fail2ban.sourceforge.net/
 +Summary     : Systemd journal configuration for Fail2Ban
 +Description :
 +This package configures Fail2Ban to use the systemd journal for its log input
 +by default.
 +/etc/fail2ban/jail.d/00-systemd.conf
 +Name        : fail2ban-mail
 +Version     : 0.9.3
 +Release     : 1.el7
 +Architecture: noarch
 +Install Date: Mon 12 Sep 2016 01:32:28 PM CEST
 +Group       : Unspecified
 +Size        : 11104
 +License     : GPLv2+
 +Signature   : RSA/SHA256, Sun 13 Sep 2015 07:06:55 PM CEST, Key ID 6a2faea2352c64e5
 +Source RPM  : fail2ban-0.9.3-1.el7.src.rpm
 +Build Date  : Sat 12 Sep 2015 11:19:16 PM CEST
 +Build Host  : buildvm-04.phx2.fedoraproject.org
 +Relocations : (not relocatable)
 +Packager    : Fedora Project
 +Vendor      : Fedora Project
 +URL         : http://fail2ban.sourceforge.net/
 +Summary     : Mail actions for Fail2Ban
 +Description :
 +This package installs Fail2Ban's mail actions.  These are an alternative
 +to the default sendmail actions.
 +/etc/fail2ban/action.d/complain.conf
 +/etc/fail2ban/action.d/mail-buffered.conf
 +/etc/fail2ban/action.d/mail-whois-common.conf
 +/etc/fail2ban/action.d/mail-whois-lines.conf
 +/etc/fail2ban/action.d/mail-whois.conf
 +</code>
 ===== Bestandteile ===== ===== Bestandteile =====
  
Zeile 646: Zeile 1412:
  
 Der **client** liest die Konfigurationsdateien ein und kann auch dazu verwendet werden, einfache Befehle an den **server** zu übermitteln. Die Befehlsübermittlung kann über die Befehlszeile oder auch in einem Interaktiven-Modus erfolgen. Der **client** ist sogar in der Lage den **server** zu starten. Der **client** liest die Konfigurationsdateien ein und kann auch dazu verwendet werden, einfache Befehle an den **server** zu übermitteln. Die Befehlsübermittlung kann über die Befehlszeile oder auch in einem Interaktiven-Modus erfolgen. Der **client** ist sogar in der Lage den **server** zu starten.
- 
-Everything set in the configuration files can be configured manually. The configuration is just a simple and efficient way to configure the server. fail2ban-client only translates the configuration into a suite of commands. 
  
 Alle Angaben, welche in den Konfigurationsdateien hinterlegt sind, können auch direkt z.B. über die Befehlszeile dem **client** übermittelt werden. Die Verwendung von Konfigurationsdateien, stellt bei [[http://www.fail2ban.org|fail2ban]] nur eine einfache und effiziente Möglichkeit dar, Befehle über den **client** an den **server** zu übermitteln.  Alle Angaben, welche in den Konfigurationsdateien hinterlegt sind, können auch direkt z.B. über die Befehlszeile dem **client** übermittelt werden. Die Verwendung von Konfigurationsdateien, stellt bei [[http://www.fail2ban.org|fail2ban]] nur eine einfache und effiziente Möglichkeit dar, Befehle über den **client** an den **server** zu übermitteln. 
Zeile 669: Zeile 1433:
 Falls das im Hinweis beschriebene Verhalten **__nicht__** gewünscht sein sollte, kann nachfolgende Änderung dies beheben: Falls das im Hinweis beschriebene Verhalten **__nicht__** gewünscht sein sollte, kann nachfolgende Änderung dies beheben:
  
-Es sollte die **Originaldatei** - **''/etc/fail2ban/fail2ban.conf''** - **__NICHT__** verändert werden! Stattdessen sollte eine Konfigurationsdatei mit Namen+:!: **WICHTIG** - Es sollte die **Originaldatei** - **''/etc/fail2ban/fail2ban.conf''** - **__NICHT__** verändert werden! 
 + 
 +Stattdessen sollte eine Konfigurationsdatei mit Namen
   * **''/etc/fail2ban/fail2ban.local''**   * **''/etc/fail2ban/fail2ban.local''**
 mit nachfolgendem Befehl angelegt werden: mit nachfolgendem Befehl angelegt werden:
Zeile 699: Zeile 1465:
 Die wohl **wichtigste** Konfigurationsdatei von [[http://www.fail2ban.org|fail2ban]] ist Die wohl **wichtigste** Konfigurationsdatei von [[http://www.fail2ban.org|fail2ban]] ist
   * **''/etc/fail2ban/jail.conf''**   * **''/etc/fail2ban/jail.conf''**
 +
 +:!: **WICHTIG** - Es sollte die **Originaldatei** - **''/etc/fail2ban/jail.conf''** - **__NICHT__** verändert werden!
 +
 +Stattdessen sollte eine Konfigurationsdatei mit Namen
 +  * **''/etc/fail2ban/jail.local''**
 +mit nachfolgendem Befehl angelegt werden:
 +<code>
 +# touch /etc/fail2ban/jail.local
 +</code>
  
 Diese enthält die **Definitionen** der einzelnen **jail**'s von [[http://www.fail2ban.org|fail2ban]]. Standardmäßig sind einige **Vorlagen** hier enthalten, welche nur **enabled** - aktiviert werden müssen und ggf. an die persönlichen Bedürfnisse angepasst werden können. Diese enthält die **Definitionen** der einzelnen **jail**'s von [[http://www.fail2ban.org|fail2ban]]. Standardmäßig sind einige **Vorlagen** hier enthalten, welche nur **enabled** - aktiviert werden müssen und ggf. an die persönlichen Bedürfnisse angepasst werden können.
Zeile 713: Zeile 1488:
 | backend        | auto                   | Backend, welches zur Überwachung von Dateioperationen verwendet wird                              | | backend        | auto                   | Backend, welches zur Überwachung von Dateioperationen verwendet wird                              |
  
-:!: **HWINEIS** - Angaben innerhalb von **jail**'s - **__überschreiben__** die Standardwerte aus der Definition **[DEFAULT]**!+:!: **HINWEIS** - Angaben innerhalb von **jail**'s - **__überschreiben__** die Standardwerte aus der Definition **[DEFAULT]**!
  
 Grundsätzlich ist ein **jail** immer dann gebildet, wenn ein **filter** und mindestens eine **action** in einer Definition aktiv sind. Grundsätzlich ist ein **jail** immer dann gebildet, wenn ein **filter** und mindestens eine **action** in einer Definition aktiv sind.
Zeile 731: Zeile 1506:
 filter   = sshd filter   = sshd
 action   = iptables[name=SSH, port=ssh, protocol=tcp] action   = iptables[name=SSH, port=ssh, protocol=tcp]
-           sendmail-whois[name=SSH, dest=root, sender=fail2ban@example.com]+           mail-whois[name=SSH, dest=root, sender=fail2ban@example.com]
 logpath  = /var/log/secure logpath  = /var/log/secure
 maxretry = 5 maxretry = 5
Zeile 753: Zeile 1528:
  
 ==== /etc/fail2ban/action.d ==== ==== /etc/fail2ban/action.d ====
- 
-The directory action.d contains different scripts defining actions. The actions are executed at well-defined moments during the execution of Fail2ban: when starting/stopping a jail, banning/unbanning a host, etc. 
  
 Im Verzeichnis Im Verzeichnis
Zeile 809: Zeile 1582:
  
 Abschließend kann dann [[http://www.fail2ban.org|fail2ban]] mit nachfolgendem Befehl gestartet werden: Abschließend kann dann [[http://www.fail2ban.org|fail2ban]] mit nachfolgendem Befehl gestartet werden:
 +
 +**__CentOS 6:__**
 +
 <code> <code>
 # service fail2ban start # service fail2ban start
Zeile 821: Zeile 1597:
  �<30>fail2ban.filter : INFO   Set findtime = 600  �<30>fail2ban.filter : INFO   Set findtime = 600
                                                             OK  ]                                                             OK  ]
 +</code>
 +
 +**__CentOS 7:__**
 +
 +<code>
 +# systemctl start fail2ban.service
 +</code>
 +bzw.
 +<code>
 +# systemctl status fail2ban.service
 +● fail2ban.service - Fail2Ban Service
 +   Loaded: loaded (/usr/lib/systemd/system/fail2ban.service; disabled; vendor preset: disabled)
 +   Active: active (running) since Mon 2016-09-12 14:02:12 CEST; 31s ago
 +     Docs: man:fail2ban(1)
 +  Process: 9223 ExecStart=/usr/bin/fail2ban-client -x start (code=exited, status=0/SUCCESS)
 + Main PID: 9248 (fail2ban-server)
 +   CGroup: /system.slice/fail2ban.service
 +           └─9248 /usr/bin/python2 -s /usr/bin/fail2ban-server -s /var/run/fa...
 +
 +Sep 12 14:02:10 vml71010.edmz.tachtler.net systemd[1]: Starting Fail2Ban Serv...
 +Sep 12 14:02:10 vml71010.edmz.tachtler.net fail2ban-client[9223]: 2016-09-12 ...
 +Sep 12 14:02:10 vml71010.edmz.tachtler.net fail2ban-client[9223]: 2016-09-12 ...
 +Sep 12 14:02:12 vml71010.edmz.tachtler.net systemd[1]: Started Fail2Ban Service.
 +Hint: Some lines were ellipsized, use -l to show in full.
 </code> </code>
  
 Um [[http://www.fail2ban.org|fail2ban]] auch nach einem Neustart (**restart**) des Servers automatisch zu starten, sollten nachfolgende Konfiguration durchgeführt werden. Um [[http://www.fail2ban.org|fail2ban]] auch nach einem Neustart (**restart**) des Servers automatisch zu starten, sollten nachfolgende Konfiguration durchgeführt werden.
 +
 +**__CentOS 6:__**
  
 Nachfolgender Befehl, fügt das **Start-Skript** Nachfolgender Befehl, fügt das **Start-Skript**
Zeile 836: Zeile 1638:
 # chkconfig --list | grep fail2ban # chkconfig --list | grep fail2ban
 fail2ban        0:off   1:off   2:on    3:on    4:on    5:on    6:off fail2ban        0:off   1:off   2:on    3:on    4:on    5:on    6:off
 +</code>
 +
 +**__CentOS 7:__**
 +
 +Nachfolgender Befehl, fügt das **Systemd-Start-Skript**
 +  * **''/usr/lib/systemd/system/fail2ban.service''**
 +der automatischen Ausführung (Start) beim Start oder Neustart des Servers/Knotens hinzu:
 +<code>
 +# systemctl enable fail2ban.service
 +Created symlink from /etc/systemd/system/multi-user.target.wants/fail2ban.service to /usr/lib/systemd/system/fail2ban.service.
 +</code>  
 +
 +Ein Überprüfung, ob dies erfolgreich war, kann mit nachfolgendem Befehl durchgeführt werden:
 +<code>
 +# systemctl is-enabled fail2ban.service
 +enabled
 </code> </code>
  
Zeile 873: Zeile 1691:
  
 Auch nachfolgende Ausgabe von [[tachtler:iptables|iptables]] mit nachfolgendem Befehl, zeigt die aktuell geblockten IP-Adressen: Auch nachfolgende Ausgabe von [[tachtler:iptables|iptables]] mit nachfolgendem Befehl, zeigt die aktuell geblockten IP-Adressen:
 +
 +**__CentOS 6:__**
 +
 <code> <code>
 # iptables -nvL fail2ban-SSH # iptables -nvL fail2ban-SSH
Zeile 881: Zeile 1702:
 </code> </code>
  
-===== Konfigurationsbeispiel ===== +**__CentOS 7:__**
- +
-Nachfolgende Beispiele der genannten Konfigurationsdateien mit möglichen Einstellungen: +
- +
-==== /etc/fail2ban/fail2ban.conf ====+
  
 <code> <code>
-Fail2Ban configuration file +iptables -nvL f2b-SSH 
-# +Chain fail2ban-SSH (1 references) 
-# Author: Cyril Jaquier + pkts bytes target     prot opt in     out     source               destination          
-# +        0 DROP       all  --  *      *       123.456.789.123      0.0.0.0/           
-# $Revision: 629 $ +   60  3216 RETURN     all  --  *      *       0.0.0.0/           0.0.0.0/0 
-#+</code>
  
-[Definition]+===== Konfigurationsbeispiel =====
  
-# Option loglevel +Nachfolgende Beispiele der genannten Konfigurationsdateien mit möglichen Einstellungen:
-# Notes.:  Set the log level output. +
-#          1 = ERROR +
-#          2 = WARN +
-#          3 = INFO +
-#          4 = DEBUG +
-# Values:  NUM  Default: +
-+
-loglevel = 3+
  
-# Option:  logtarget +==== /etc/fail2ban/jail.local ====
-# Notes.:  Set the log target. This could be a file, SYSLOG, STDERR or STDOUT. +
-#          Only one log target can be specified. +
-# Values:  STDOUT STDERR SYSLOG file  Default:  /var/log/fail2ban.log +
-+
-logtarget = SYSLOG +
- +
-# Option: socket +
-# Notes.: Set the socket file. This is used to communicate with the daemon. Do +
-#         not remove this file when Fail2ban runs. It will not be possible to +
-#         communicate with the server afterwards. +
-# Values: FILE  Default:  /var/run/fail2ban/fail2ban.sock +
-+
-socket = /var/run/fail2ban/fail2ban.sock +
- +
-</code> +
- +
-==== /etc/fail2ban/jail.conf ====+
  
 Beispiel mit **jail**'s für Beispiel mit **jail**'s für
Zeile 931: Zeile 1723:
  
 <code> <code>
-# Fail2Ban configuration file 
-# 
-# Author: Cyril Jaquier 
-# 
-# $Revision: 747 $ 
-# 
- 
 # The DEFAULT allows a global definition of the options. They can be override # The DEFAULT allows a global definition of the options. They can be override
 # in each jail afterwards. # in each jail afterwards.
Zeile 960: Zeile 1745:
 # default: findtime  = 600 # default: findtime  = 600
 findtime  = 900 findtime  = 900
- 
-# "maxretry" is the number of failures before a host get banned. 
-maxretry = 3 
- 
-# "backend" specifies the backend used to get files modification. Available 
-# options are "inotify", "gamin", "polling" and "auto". This option can be 
-# overridden in each jail too (use "gamin" for a jail and "polling" for 
-# another). 
-# 
-# inotify: requires pyinotify and the a kernel supporting Inotify 
-# gamin:   requires Gamin (a file alteration monitor) to be installed. If Gamin 
-#          is not installed, Fail2ban will use polling. 
-# polling: uses a polling algorithm which does not require external libraries. 
-# auto:    will choose Inotify if pyinotify is present, if not then it will 
-#          try Gamin and use that if available, and polling otherwise. 
-backend = auto 
- 
  
 # This jail corresponds to the standard configuration in Fail2ban 0.6. # This jail corresponds to the standard configuration in Fail2ban 0.6.
 # The mail-whois action send a notification e-mail with a whois request # The mail-whois action send a notification e-mail with a whois request
 # in the body. # in the body.
 +
  
 [ssh-iptables] [ssh-iptables]
Zeile 1015: Zeile 1784:
 ===== Problembehebung ===== ===== Problembehebung =====
  
-==== /etc/fail2ban/filter.d/sasl.conf ====+==== /etc/fail2ban/filter.d/sasl.local ====
  
 Um in einem **jail** - **sasl** erfolgreich einsetzen zu können, muss nachfolgende Anpassung an der Konfigurationsdatei Um in einem **jail** - **sasl** erfolgreich einsetzen zu können, muss nachfolgende Anpassung an der Konfigurationsdatei
-  * **''/etc/fail2ban/filter.d/sasl.conf''**+  * **''/etc/fail2ban/filter.d/sasl.local''**
 erfolgen: erfolgen:
 <code> <code>
Zeile 1025: Zeile 1794:
 # Author: Yaroslav Halchenko # Author: Yaroslav Halchenko
 # #
-# $Revision: 728 $+# $Revision$
 # #
  
Zeile 1037: Zeile 1806:
 # Values: TEXT # Values: TEXT
 # #
 +failregex = (?i): warning: [-._\w]+\[<HOST>\]: SASL (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(: [ A-Za-z0-9+/]*={0,2})?\s*$
 +# Tachtler
 failregex = (?i): warning: [-._\w]+\[<HOST>\]: SASL (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(: [A-Za-z0-9+/]*={0,2})?$ failregex = (?i): warning: [-._\w]+\[<HOST>\]: SASL (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(: [A-Za-z0-9+/]*={0,2})?$
 # Tachtler # Tachtler
Zeile 1048: Zeile 1819:
 </code> </code>
  
-:!: **HINWEIS** - Es fehlt nur ein **''LEERZEICHEN''** nach dem **/**-Zeichen. Ausschnitt: **[A-Za-z0-9+/ ]*={0,2})?$** +:!: **HINWEIS** - Es fehlt nur ein **''LEERZEICHEN''** nach dem **//**-Zeichen. Ausschnitt: **[A-Za-z0-9+// ]*={0,2})?$** 
  
 Um die Änderungen an der Konfiguration zu testen und um zu überprüfen, ob eine Übereinstimmung mit den Angaben in der **regular expression** mit Inhalten in der angegebenen LOG-Datei vorhanden sind, kann nachfolgender Befehl genutzt werden: Um die Änderungen an der Konfiguration zu testen und um zu überprüfen, ob eine Übereinstimmung mit den Angaben in der **regular expression** mit Inhalten in der angegebenen LOG-Datei vorhanden sind, kann nachfolgender Befehl genutzt werden:
 <code> <code>
-# fail2ban-regex /var/log/maillog /etc/fail2ban/filter.d/sasl.conf +# fail2ban-regex /var/log/maillog /etc/fail2ban/filter.d/sasl.local 
 /usr/share/fail2ban/server/filter.py:442: DeprecationWarning: the md5 module is deprecated; use hashlib instead /usr/share/fail2ban/server/filter.py:442: DeprecationWarning: the md5 module is deprecated; use hashlib instead
   import md5   import md5
Zeile 1109: Zeile 1880:
 However, look at the above section 'Running tests' which could contain important However, look at the above section 'Running tests' which could contain important
 information. information.
 +</code>
 +
 +===== IP-Adresse manuell löschen "unban" =====
 +
 +Nachfolgende Befehle ermöglichen es, eine IP-Adresse, welche von [[http://www.fail2ban.org|fail2ban]] als **"banned"** gelistet ist zu **löschen** (**"unban"**).
 +
 +Dies soll durch Aufruf des **''fail2ban-client''** im **interaktiven Modus** erfolgen.
 +
 +Um den **''fail2ban-client''** in den **interaktiven Modus** zu versetzen, ist nachfolgender Befehl erforderlich:
 +<code bash>
 +# fail2ban-client -i
 +Fail2Ban v0.9.7 reads log file that contains password failure report
 +and bans the corresponding IP addresses using firewall rules.
 +
 +fail2ban>
 +</code>
 +
 +Anschließend befindet sich der **''fail2ban-client''** im **interaktiven Modus**, was durch den **Prompt** erkennbar ist.
 +
 +Durch Eingabe von nachfolgendem Befehl, werden die einzelnen **''jails''** aufgelistet, aus denen nun eine IP-Adresse gelöscht werden kann:
 +<code bash>
 +fail2ban> status
 +Status
 +|- Number of jail:      3
 +`- Jail list:   portscan, sshd, sshd-ddos
 +</code>
 +
 +Durch Erweiterung des vorhergehenden Befehls, um die Angabe eines **''jails''**, können nun die sich darin gelisteten IP-Adressen aufgelistet werden, was mit nachfolgendem Befehl **hier** für den **''jail''** - **''portscan''** durchgeführt werden soll:
 +<code bash>
 +fail2ban> status portscan
 +Status for the jail: portscan
 +|- Filter
 +|  |- Currently failed: 59
 +|  |- Total failed:     760
 +|  `- Journal matches:  _TRANSPORT=kernel
 +`- Actions
 +   |- Currently banned: 2
 +   |- Total banned:     2
 +   `- Banned IP list:   151.101.114.49 85.93.20.106
 +</code>
 +
 +Um jetzt z.B. die IP-Adresse **''151.101.114.49''** zu löschen (**"unban"**), muss nachfolgender Befehl wie folgt eingegeben werden:
 +<code bash>
 +fail2ban> set portscan unbanip 151.101.114.49
 +151.101.114.49
 +</code>
 +
 +Als Antwort auf den vorhergehenden Befehl, sollte die eingegeben IP-Adresse erscheinen, was das löschen (**"unban"**) bestätigt.
 +
 +Eine erneute Abfrage der gelisteten IP-Adressen im **''jail''** - **''portscan''**, sollte nun ohne die entsprechende IP-Adresse erfolgen, was nachfolgende Abfrage zeigt:
 +<code bash>
 +fail2ban> status portscan
 +Status for the jail: portscan
 +|- Filter
 +|  |- Currently failed: 62
 +|  |- Total failed:     781
 +|  `- Journal matches:  _TRANSPORT=kernel
 +`- Actions
 +   |- Currently banned: 1
 +   |- Total banned:     2
 +   `- Banned IP list:   85.93.20.106
 +</code>
 +
 +Um den **interaktiven Modus** von **''fail2ban-client''** wider zu verlassen, kann nachfolgender Befehl eingegeben werden:
 +<code bash>
 +fail2ban> exit
 </code> </code>
  
tachtler/fail2ban.1357291433.txt.gz · Zuletzt geändert: 2013/01/04 10:23 von klaus