[OpenIndiana-discuss] denyhosts IPS package?

[Stefan Müller-Wilken]

Hmmm... I thought I had checked for fail2ban as well but apparently haven't if it is in fact there. Maybe fail2ban is even supperior as it is not restricted to SSH but could secure IMAP as well. Thanks for your feedback!

Cheers
 Stefan


Am 15.01.2014 um 14:10 schrieb "Predrag Zecevic [Unix Systems Administrator]" <predrag.zecevic at 2e-systems.com>:

> Hi Stefan,
>
> does fail2ban fits your needs?
>
> $ pkg info network/fail2ban
>          Name: network/fail2ban
>       Summary: monitor logfiles for invalid login attempts and ban source IP-addresses - (github version e065f64b14699758a28fdbf4622fca884753e68f)
>   Description: Fail2Ban monitors log files like /var/log/pwdfail or
>                /var/log/apache/error_log and bans failure-prone addresses. It
>                updates firewall rules to reject the IP address or executes user
>                defined commands. (currently: /etc/hosts.deny is updated) NOTE:
>                You need to configure syslog.conf to get necessary login log
>                entries ========================================================
>                ================== INSTALLATION ON SOLARIS -> Read the file
>                /usr/share/doc/SFEfail2ban/README.Solaris Note from SFE
>                maintainer for this package: If you do not follow the above
>                README.Solaris (files already copied!) then you will not get a
>                working fail2ban setup!
>      Category: Network
>         State: Installed
>     Publisher: sfe
>       Version: 0.0.0.0.0.2
>        Branch: 0.151.1.8
> Packaging Date: December  4, 2013 06:11:08 PM
>          Size: 296.89 kB
>          FMRI: pkg://sfe/network/fail2ban@0.0.0.0.0.2-0.151.1.8:20131204T181108Z
>
>
> Regards.
>
> On 01/15/14 01:54 PM, Stefan Müller-Wilken wrote:
>> Hi there,
>>
>> is there a denyhosts package available? I'd like to more effectively ban dictionary attackers from my systems and looking at https://www.illumos.org/issues/228#note-8 a package was at least in discussion.
>>
>> @Ken: can you comment on this?
>>
>> Cheers
>>  Stefan.
>>
>> ________________________________
>> Acando GmbH, Millerntorplatz 1, 20359 Hamburg, Germany | Geschäftsführer: Guido Ahle | Amtsgericht Hamburg, HRB 76048 | Ust.Ident-Nr.:DE208833022
>> _______________________________________________
>> OpenIndiana-discuss mailing list
>> OpenIndiana-discuss at openindiana.org
>> http://openindiana.org/mailman/listinfo/openindiana-discuss
>
> --
> Predrag Zečević, Technical Support Analyst, 2e Systems GmbH
>
> Telephone: +49 6196 9505 815, Facsimile: +49 6196 9505 894
> Mobile:    +49  174 3109 288,     Skype: predrag.zecevic
> E-mail:    predrag.zecevic at 2e-systems.com
>
> Headquarter:          2e Systems GmbH, Königsteiner Str. 87,
>                      65812 Bad Soden am Taunus, Germany
> Company registration: Amtsgericht Königstein (Germany), HRB 7303
> Managing director:    Phil Douglas
>
> http://www.2e-systems.com/ - Making your business fly!
>
> [***]===---
> Everybody needs a little love sometime; stop hacking and fall in love!
>
> _______________________________________________
> OpenIndiana-discuss mailing list
> OpenIndiana-discuss at openindiana.org
> http://openindiana.org/mailman/listinfo/openindiana-discuss

________________________________
Acando GmbH, Millerntorplatz 1, 20359 Hamburg, Germany | Geschäftsführer: Guido Ahle | Amtsgericht Hamburg, HRB 76048 | Ust.Ident-Nr.:DE208833022