add ssh-ddos jail

2013-05-03 15:41:30 +02:00 · 2013-05-03 15:41:30 +02:00 · a04440c3b2
parent 14170ae297
commit a04440c3b2
1 changed files with 12 additions and 0 deletions
--- a/root/etc/e-smith/templates/etc/fail2ban/jail.conf/30Service10ssh
+++ b/root/etc/e-smith/templates/etc/fail2ban/jail.conf/30Service10ssh
@ -12,6 +12,18 @@ logpath  = /var/log/sshd/current
 action   = smeserver-iptables[port="$port",protocol=tcp,bantime=$bantime]
 EOF

+$OUT .= "           smeserver-sendmail[name=\"SSH\",dest=$maildest]\n"
+    if ($mail eq 'enabled');
+
+$OUT .=<<"EOF";
+
+[ssh-ddos]
+enabled  = true
+filter   = sshd-ddos
+logpath  = /var/log/sshd/current
+action   = smeserver-iptables[port="$port",protocol=tcp,bantime=$bantime]
+EOF
+
 $OUT .= "           smeserver-sendmail[name=\"SSH\",dest=$maildest]\n"
    if ($mail eq 'enabled');