ISPConfig3, IPv6 & Fail2Ban

Discussion in 'General' started by Hans, Oct 22, 2014.

  1. Hans

    Hans Moderator ISPConfig Developer

    On the moment i am setting up a new ISPConfig3 server cluster based on Debian 7 (Wheezy).
    Debian 7 & ISPConfig3 are ready for IPv6, but i doubt if there is support for IPv6 in Fail2Ban.
    If Fail2Ban does not have IPv6 support, what is the recommended setup, if i like to use Fail2Ban?
    Completely disable IPv6 on the servers or is there another way to handle this?

    I like to hear from you!
     
    Last edited: Oct 22, 2014
  2. srijan

    srijan New Member HowtoForge Supporter

    Sorry till date IPv6 is not supported by Fail2ban. https://github.com/fail2ban/fail2ban/issues/39

    I've seen on fail2ban.org, that there seem to be support for ufw firewall in fail2ban in the latest release:

    https://github.com/fail2ban/fail2ban...ses/tag/0.8.12

    ufw supports ipv4 and ipv6 and ispconfig can use ufw as well, so this might be a way to get ipv6 support in fail2ban.

    OR

    You can try http://crycode.de/linux/77-fail2ban-mit-ipv6
     
  3. Hans

    Hans Moderator ISPConfig Developer

    Srijan,

    Thank you for your information. I'll definitely give it a try.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Iam not sure if this will work if fail2ban is not able to recognise ipv6 ip addresses in the logs.
     
  5. Hans

    Hans Moderator ISPConfig Developer

    Hi Till,

    Thank you for your feedback.
    I really appreciate it, but what are you doing then in such a situation?
    You simply disable IPv6 for the time being or do you prefer another solution?
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    I'am not aware of a good solution or fail2ban replacements. fail2ban will only work on IPv4 at the moment (except of some experimental patches) so if you want to protect your server with fail2ban then disabling ipv6 might be the only alternative.
     

Share This Page