https://blog.099c.org/tags/ipset/ Recent content in Ipset on Apuntes de root Hugo en-US jorti@pm.me (Juan Orti Alcaine) jorti@pm.me (Juan Orti Alcaine) Thu, 27 Feb 2014 00:00:00 +0000 https://blog.099c.org/posts/configure-fail2ban-in-fedora-20-to-use-firewall-cmd-and-ipset/ Thu, 27 Feb 2014 00:00:00 +0000jorti@pm.me (Juan Orti Alcaine) https://blog.099c.org/posts/configure-fail2ban-in-fedora-20-to-use-firewall-cmd-and-ipset/ <p><em><strong>Note (October 20 2014):</strong> This post is outdated, please, refer to the post <a href="https://blog.099c.org/posts/fail2ban-0-9/">fail2ban 0.9</a> for more up to date information.</em></p> <p>fail2ban is a handy daemon that monitors the log files to identify connection attempts and other kind of attacks and ban those IPs for a certain period of time.</p> <p>Currently, fail2ban upstream is adding support to firewalld and the use of ipset, so some modifications are needed at the stock config.</p> <p>First of all, install the needed packages, I add rsyslog because it&rsquo;s not included in the default Fedora 20 installation and it&rsquo;s needed to generate <code>/var/log/secure</code>. I hope fail2ban will support some day querying the journal directly.</p>