YunoHost/doc
1
0
Fork 0
mirror of https://github.com/YunoHost/doc.git synced 2024-09-03 20:06:26 +02:00
Code Issues Projects Releases Packages Wiki Activity

Add fail2ban_fr.md

Browse source
This commit is contained in:
beudbeud@beudibox.fr 2014-06-17 11:32:43 +02:00 • committed by YunoHost
parent d46ef7da8b
commit ddec731435
1 changed files with 50 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

50
fail2ban_fr.md Normal file
View file

@ -0,0 +1,50 @@
#Fail2ban
##DéBannir un IP
Tout d'abord on affiche le listing de toute les régles iptables avec la commande :
```bash
root@beudi:~# iptables -L --line-numbers
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 fail2ban-yunohost tcp -- anywhere anywhere multiport dports http,https
2 fail2ban-nginx tcp -- anywhere anywhere multiport dports http,https
3 fail2ban-dovecot tcp -- anywhere anywhere multiport dports smtp,ssmtp,imap2,imap3,imaps,pop3,pop3s
4 fail2ban-sasl tcp -- anywhere anywhere multiport dports smtp,ssmtp,imap2,imap3,imaps,pop3,pop3s
5 fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh
Chain FORWARD (policy ACCEPT)
num target prot opt source destination
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
Chain fail2ban-dovecot (1 references)
num target prot opt source destination
1 RETURN all -- anywhere anywhere
Chain fail2ban-nginx (1 references)
num target prot opt source destination
1 RETURN all -- anywhere anywhere
Chain fail2ban-sasl (1 references)
num target prot opt source destination
1 RETURN all -- anywhere anywhere
Chain fail2ban-ssh (1 references)
num target prot opt source destination
1 RETURN all -- anywhere anywhere
Chain fail2ban-yunohost (1 references)
num target prot opt source destination
1 DROP all -- 80.215.197.201 anywhere
2 RETURN all -- anywhere anywhere
```
Il nous indique que l'ip 80.215.197.201 est banni dans la règle fail2ban-yunohost. Pour débloquer cette IP il faut faire la commande
iptables -D nom_de_la_regle numéro_de_l'entré
exemple :
iptables -D fail2ban-yunohost 1