Fail2ban

Fail2ban Description

Fail2ban is an open source command-line tool that can be used to scans logs and bans IP addresses that generate too many password failures, on Linux machines.Fail2ban is a highly configurable software that allows users to parse log files and look for given patterns, execute commands when a pattern has be detected for the same IP address, for more than X times, execute commands in order to unban an IP address.The software uses iptables by default, but it can also use  TCP Wrapper (/etc/hosts.deny) or others firewalls. It handles log files rotation, resolves DNS hostname to IP address, sends e-mail notifications, and can handle more than one service (apache, sshd, vsftpd, etc.) and multiple logging targets (stdout, syslog, stderr, etc.). Requirements:Python What's New in This Release: [ read full changelog ]New bits:Log rotation can now occur with the command"flushlogs"rather than reloading fail2ban or keeping the logtarget settings consistent in jail.conf/local and /etc/logrotate.d/fail2ban. (Debian bug #697333, Redhat bug #891798).Added ignorecommand option for allowing dynamic determination as to ignore and IP or not.Remove indentation of name and loglevel while logging to SYSLOG to resolve syslog(-ng) parsing problems. (Debian bug #730202). Log lines now also report"[PID]"after the name portion too.Epoch dates can now be enclosed within []New actions:badipsfirewallcmd-ipsetufwblocklist_deNew filters:solid-pop3dnsdopenwebmailhordefreeswitchsquidejabberdopenwebmailgroupofficeFilter improvements:apache-noscript now includes php cgi scriptsexim-spam filter to match spamassassin log entry for option SAdevnull.Added to sshd filter expression for"Received disconnect from : 3: Auth fail"Improved ACL-handling for AsteriskAdded imprope... �.You can free download Fail2ban from Softpedia now.