fail2ban 0.9.2 on Debian

自動啟動

#> cd fail2ban-0.9.2/
#> cp files/debian-initd /etc/init.d/fail2ban
#> chmod 0755 /etc/init.d/fail2ban 

Asterisk Logger 設定

/etc/asterisk/logger.conf:

...
[logfiles]
...
fail2ban => notice,warning,security 

套用設定

#> asterisk -rx "logger reload"
#> asterisk -rx "logger show channels" 

設定 jail

for Asterisk)
/etc/fail2ban/jail.d/asterisk.conf

[asterisk]
enabled = true
logpath = /var/log/asterisk/fail2ban
maxretry = 5
bantime = 259200

for SSH)
/etc/fail2ban/jail.d/sshd.conf

[sshd]
enabled = true
logpath = %(sshd_log)s
bantime  = 1800