Browse Source

Update jail.local

Set the fail2ban to block only web interface for failed authentication attempts.
FusionPBX 9 years ago
parent
commit
249b9d74a6
1 changed files with 2 additions and 2 deletions
  1. 2 2
      debian/resources/fail2ban/jail.local

+ 2 - 2
debian/resources/fail2ban/jail.local

@@ -38,9 +38,9 @@ port     = 80,443
 protocol = tcp
 filter   = fusionpbx
 logpath  = /var/log/auth.log
-action   = iptables-allports[name=fusionpbx, protocol=all]
+action   = iptables-multiport[name=fusionpbx, port="http,https", protocol=tcp]
 #          sendmail-whois[name=fusionpbx, dest=root, [email protected]] #no smtp server installed
-maxretry = 5
+maxretry = 10
 findtime = 600
 bantime  = 600