1FAIL2BAN(1) General Commands Manual FAIL2BAN(1)
2
3
4
6 fail2ban - a set of server and client programs to limit brute force
7 authentication attempts.
8
10 Fail2Ban consists of a client, server and configuration files to limit
11 brute force authentication attempts.
12
13 The server program fail2ban-server is responsible for monitoring log
14 files and issuing ban/unban commands. It gets configured through a
15 simple protocol by fail2ban-client, which can also read configuration
16 files and issue corresponding configuration commands to the server.
17
18 For details on the configuration of fail2ban see the jail.conf(5) man‐
19 ual page. A jail (as specified in jail.conf) couples filters and
20 actions definitions for any given list of files to get monitored.
21
22 For details on the command-line options of fail2ban-server see the
23 fail2ban-server(1) manual page.
24
25 For details on the command-line options and commands for configuring
26 the server via fail2ban-client see the fail2ban-client(1) manual page.
27
28 For testing regular expressions specified in a filter using the
29 fail2ban-regex program may be of use and its manual page is fail2ban-
30 regex(1).
31
32
34 Fail2Ban is able to reduce the rate of incorrect authentications
35 attempts however it cannot eliminate the risk that weak authentication
36 presents. Configure services to use only two factor or public/private
37 authentication mechanisms if you really want to protect services.
38
39 A local user is able to inject messages into syslog and using a
40 Fail2Ban jail that reads from syslog, they can effectively trigger a
41 DoS attack against any IP. Know this risk and configure Fail2Ban/grant
42 shell access accordingly.
43
44
46 /etc/fail2ban/*
47
49 Manual page written by Daniel Black and Yaroslav Halchenko
50
52 Report bugs to https://github.com/fail2ban/fail2ban/issues
53
55 Copyright © 2013
56 Copyright of modifications held by their respective authors. Licensed
57 under the GNU General Public License v2 (GPL).
58
60 fail2ban-server(1) fail2ban-client(1) fail2ban-regex(1) jail.conf(5)
61
62
63
64Fail2Ban March 2013 FAIL2BAN(1)