fail2ban setup --------------------------------------------- vim jail.conf [kazoo-provision] enabled = true port = 80,443 filter = kazoo-provision logpath = /PathToProvisioner/logs/log_.txt action = sendmail-whois-lines[name=provision, dest="user@email.com", sender=provision@servername, logpath=/PathToProvisioner/logs/log_.txt, sendername="Fail2Ban provision"] iptables-allports[name=provision, port=80, protocol=all] maxretry = 3 bantime = 800 ---------------------------------------------- vim filter.d/kazoo-provision.conf [Definition] failregex = WARN --> Needs manual provisioning... Apparently.* .*IP: ignoreregex = ---------------------------------------------- vim action.d/iptables-allports.conf [INCLUDES] before = iptables-common.conf [Definition] actionstart = -N f2b- -A f2b- -j -I -p -j f2b- actionstop = -D -p -j f2b- -F f2b- -X f2b- actioncheck = -n -L | grep -q 'f2b-[ \t]' actionban = -I f2b- 1 -s -j [Init] ----------------------------------------------- vim action.d/sendmail-whois-lines.conf [INCLUDES] before = sendmail-common.conf [Definition] actionstart = printf %%b "Subject: [Fail2Ban servername] : started on `uname -n` Date: `LC_TIME=C date -u +"%%a, %%d %%h %%Y %%T +0000"` From: <> To: \n Hi,\n The jail has been started successfully.\n Regards,\n Fail2Ban servername" | /usr/sbin/sendmail -f actionstop = printf %%b "Subject: [Fail2Ban servername] : stopped on `uname -n` Date: `LC_TIME=C date -u +"%%a, %%d %%h %%Y %%T +0000"` From: <> To: \n Hi,\n The jail has been stopped.\n Regards,\n Fail2Ban servername" | /usr/sbin/sendmail -f actionban = printf %%b "Subject: [Fail2Ban servername] : banned from `uname -n` Date: `LC_TIME=C date -u +"%%a, %%d %%h %%Y %%T +0000"` From: <> To: \n Hi,\n The IP has just been banned by Fail2Ban servername after attempts against .\n\n Here are more information about :\n `/usr/bin/whois `\n\n Lines containing IP: in \n `grep '\<\>' `\n\n Regards,\n Fail2Ban servername" | /usr/sbin/sendmail -f [Init] name = default logpath = /dev/null ----------------------------------------------------------