Tweak fail2ban defaults
This commit is contained in:
		
							parent
							
								
									68fa845a73
								
							
						
					
					
						commit
						c32a1846e0
					
				|  | @ -13,19 +13,17 @@ in { | |||
|       enable = true; | ||||
|       ignoreIP = [ "127.0.0.1/16" "192.168.1.0/24" ]; | ||||
|       banaction-allports = "iptables-allports"; | ||||
|       jails = { | ||||
|         DEFAULT = '' | ||||
|           blocktype = DROP | ||||
|           bantime = 6h | ||||
|           findtime = 15m | ||||
|         ''; | ||||
|         # Harsher defaults for sshd because it's all key based. Auth failures | ||||
|         # are less likely to be legit here. | ||||
|         sshd = '' | ||||
|           bantime = 24h | ||||
|           findtime = 1h | ||||
|         ''; | ||||
|       bantime-increment = { | ||||
|         enable = true; | ||||
|         maxtime = "168h"; | ||||
|         factor = "4"; | ||||
|       }; | ||||
|       jails.DEFAULT = '' | ||||
|         maxretry = 5 | ||||
|         blocktype = DROP | ||||
|         bantime = 1h | ||||
|         findtime = 1h | ||||
|       ''; | ||||
|     }; | ||||
| 
 | ||||
|     # Extra filters | ||||
|  |  | |||
		Loading…
	
		Reference in a new issue