Difference between revisions of "Fail2Ban installation"
| Line 17: | Line 17: | ||
It will be unbanned after 10 minutes. Most of the times this is enough for attacker to forget about your server and go out to search for other victim. | It will be unbanned after 10 minutes. Most of the times this is enough for attacker to forget about your server and go out to search for other victim. | ||
<br><br> | |||
--------- | --------- | ||
<br><br> | |||
If you need to install Fail2Ban separately on Centos, use this script: [[File:fail2ban_install.sh.xml]] | If you need to install Fail2Ban separately on Centos, use this script: [[File:fail2ban_install.sh.xml]] | ||
* Make sure ruby and python are installed (yum -y install python ruby) | |||
* Download it to your server | |||
* Rename do chmod 777 on it | |||
* Run it | |||
Script will do everything automatically: | |||
* Will check if Asterisk is installed | |||
* Will backup old Fail2Ban configuration (if exists) | |||
* Will check if iptables are installed, will install if not | |||
* Will check/fix Asterisk logger.conf file to work with Fail2Ban | |||
* Will install Fail2Ban | |||
* Will set local addresses to ignore (to not block ourselves) | |||
* Will start Fail2Ban/iptables | |||
Revision as of 14:58, 26 November 2010
This is small guide how to install Fail2Ban which will protect against brute-force attacks to your Asterisk server.
Our script is made by instructions described in this manual.
To install this script execute following commands:
- cd /usr/src/mor/sh_scripts/
- ./upgrade_install_script.sh
- ./fail2ban_install.sh
It will install Fail2Ban and iptables (if they were not present).
You can check log at /var/log/fail2ban.log to see what IPs were blocked.
IP will be blocked if it tries to register to your Asterisk server 5 times without luck.
It will be unbanned after 10 minutes. Most of the times this is enough for attacker to forget about your server and go out to search for other victim.
If you need to install Fail2Ban separately on Centos, use this script: File:Fail2ban install.sh.xml
- Make sure ruby and python are installed (yum -y install python ruby)
- Download it to your server
- Rename do chmod 777 on it
- Run it
Script will do everything automatically:
- Will check if Asterisk is installed
- Will backup old Fail2Ban configuration (if exists)
- Will check if iptables are installed, will install if not
- Will check/fix Asterisk logger.conf file to work with Fail2Ban
- Will install Fail2Ban
- Will set local addresses to ignore (to not block ourselves)
- Will start Fail2Ban/iptables
