Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
02-12-2007, 05:50 PM
|
#1
|
Member
Registered: Nov 2005
Distribution: Fedora Core 5
Posts: 64
Rep:
|
fail2ban and proftpd 1.3
So I am running Ubuntu-server with proftpd version 1.3 and fail2ban version .6.1 . I want to use fail2ban to block the brute force attacks on proftpd. I am using the default config, I just updated the config to enable proftpd. My problem is it isn't seeing any of the proftpd failed logins. I incorrectly login 8 times from another computer, but the fail2ban.log doesn't make notice of anything and I am not blocked. Does anyone know what I am doing wrong?
Thanks!!
|
|
|
02-13-2007, 05:18 AM
|
#2
|
Member
Registered: Nov 2005
Distribution: Fedora Core 5
Posts: 64
Original Poster
Rep:
|
if nobody knows what is going wrong there, is there any other tool that I should know about to block brute force attacks with proftpd?
|
|
|
02-13-2007, 09:35 AM
|
#3
|
Senior Member
Registered: Sep 2005
Location: Out
Posts: 3,307
Rep:
|
You have to change the line
enabled= false
into
enabled= true
of section proftpd in file /etc/fail2ban/jail.conf
And restart fail2ban
That works for version 0.7.7
Last edited by nx5000; 02-13-2007 at 09:36 AM.
|
|
|
02-13-2007, 09:31 PM
|
#4
|
Member
Registered: Nov 2005
Distribution: Fedora Core 5
Posts: 64
Original Poster
Rep:
|
yes but my problem is the ubuntu-server package is version 0.6.1, is there a .7.7 .deb update package I can get?
|
|
|
02-14-2007, 07:10 AM
|
#5
|
Senior Member
Registered: Sep 2005
Location: Out
Posts: 3,307
Rep:
|
It seems like you can't get it because python-central is too old and python-gamin does'nt exist.
So keep your version and try to understand the format of the configuration files at this time (have you checked the file I mentionned?)
It's a badly documented software so that's not easy.
|
|
|
All times are GMT -5. The time now is 05:12 AM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|