{{tag>Brouillon}}

= Notes fail2ban


Voir aussi :
* https://chris-knight.net/blog/2017/02/alternatives-to-fail2ban
* https://linuxfr.org/news/pyruse-1-0-pour-remplacer-fail2ban-et-autres-scruteurs-de-journaux-sur-un-gnu-linux-moderne

Alternatives :
* https://linuxfr.org/news/sortie-de-crowdsec-1-0-tutoriel-d-utilisation


== Install

<code bash>
apt-get install fail2ban rsyslog
</code>

== Unbanned Ip

<code bash>
iptable -S
iptable -L -n
</code>

<code bash>
#fail2ban-client set ssh unbanip 192.168.2.15
fail2ban-client set sshd unbanip 192.168.2.15
</code>

== Purge quick & dirty

<code bash>
systemctl stop fail2ban
rm -rf /var/lib/nethserver/fail2ban/fail2ban.json
rm -rf /var/lib/fail2ban/fail2ban.sqlite3
systemctl start fail2ban
</code>