Skip to content

Nginx Server (Fail2Ban) #1

@arun81

Description

@arun81

Hi Sir

Good Day , I have followed the process for Fail2Ban-Filters .

Working perfectly fine for SSH Failed Login Attempts

Running Nginx Web Server , Can you please let us know how to test OSInjection attack for Nginx .

Also getting the below error .

root@ubuntu:/etc/fail2ban# service fail2ban force-start

  • Starting authentication failure monitor fail2ban WARNING 'backend' not defined in 'sshd'. Using default one: 'auto'
    WARNING Wrong value for 'maxretry' in 'sshd'. Using default one: 'None'
    WARNING 'backend' not defined in 'apache-osinjection'. Using default one: 'auto'
    ERROR NOK: ("invalid literal for int() with base 10: 'None'",)
    ================================================================

Below is the jail.local

[DEFAULT]
#Ban hosts for one hour:
bantime = 600

#Override /etc/fail2ban/jail.d/00-firewalld.conf:
banaction = iptables-multiport

[apache-nohacking]
enbaled = true
port = http,https
filter = apache-nohacking
logpath = /hostdata/default/logs/*access_log
maxretry = 1

[apache-osinjection]
enabled = true
port = http,https
filyer = apache-osinjection
logpath = /hostdata/default/logs/*access.log
maxretry = 1

Thanks

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions