Is there an easy way to ban IP s ?

Has somebody already tried to install DenyHost or another IP banning tool on an ISP_Config install ?

Thanks,
Arnaud

 

Hi Till and thanks for the fast answer,
Do you know if there is any chance that an IP Banning tool will be installed directly in future ISP_Config releases ?

regards,
Arnaud

 

Ok Done and ....
It was easily installed.

So far it brought a brutal end to SSH attacks attempts

Now I need to find a solution against my SMTP brute force hackers/spammers

Thanks Till,


Arnaud

 

I think you can use fail2ban for it.

 

Ok, I have installed fail2ban in addition to DenyHost.
in the postfix filter I have replaced the regexp by the recommended :
failregex = reject: RCPT from (.*)\[<HOST>\]: 550 5.1.1
reject: RCPT from (.*)\[<HOST>\]: 450 4.7.1
reject: RCPT from (.*)\[<HOST>\]: 554 5.7.1

Is there a way to share informatoin about attacking IPs like DenyHost ?
I find that fail2ban and DenyHost are quiet complementary to each other.

regards,
Arnaud