Edit file File name : jail.local Content :#fail2ban local settings #These settings override the settings in jail.conf [ssh] action = iptables-allports ndn-central-action[cluster=fail2ban_homie_host, name=ssh] maxretry = 15 logpath = /var/log/auth.log bantime = 3600 enabled = true port = ssh filter = sshd [xmlrpc] logpath = /var/log/apache2/apache2-*.mega.log maxretry = 150 filter = xmlrpc action = iptables-allports ndn-central-action[cluster=fail2ban_homie_host, name=xmlrpc] enabled = true [proftpd] enabled = true filter = proftpd maxretry = 50 action = iptables-allports ndn-central-action[cluster=fail2ban_homie_host, name=proftpd] logpath = /var/log/auth.log [sasl] enabled = false maxretry = 50 port = smtp,ssmtp logpath = /var/log/mail.log action = iptables-allports filter = postfix-sasl [DEFAULT] bantime = 3600 backend = auto ignoreip = 127.0.0.0/8 10.0.0.0/8 172.17.0.0/16 172.21.0.0/16 172.22.0.0/16 172.24.0.0/16 173.236.0.0/16 192.168.0.0/16 205.196.0.0/16 208.113.0.0/16 208.96.0.0/16 208.97.0.0/16 209.17.0.0/16 216.193.0.0/16 66.33.0.0/16 67.205.0.0/16 63.208.0.0/16 64.111.0.0/16 64.173.0.0/16 64.175.0.0/16 64.90.0.0/16 66.201.0.0/16 69.163.0.0/16 75.119.0.0/16 192.0.0.0/8 0.0/16 173.236.0.0/16 192.168.0.0/16 205.196.0.0/16 208.113.0.0/16 208.96.0.0/16 208.97.0.0/16 209.17.0.0/16 216.193.0.0/16 66.33.0.0/16 67.205.0.0/16 63.208.0.0/16 64.111.0.0/16 64.173.0.0/16 64.175.0.0/16 64.90.0.0/16 66.201.0.0/16 69.163.0.0/16 75.119.0.0/16 192.0.0.0/8 173.245.48.0/20 103.21.244.0/22 103.22.200.0/22 103.31.4.0/22 141.101.64.0/18 108.162.192.0/18 190.93.240.0/20 188.114.96.0/20 197.234.240.0/22 198.41.128.0/17 162.158.0.0/15 104.16.0.0/12 172.64.0.0/13 131.0.72.0/22 192.88.134.0/23 185.93.228.0/22 66.248.200.0/22 52.20.63.25 3.225.202.138 3.217.200.190 54.212.71.227 52.12.170.68 34.218.21.81 3.7.90.144 13.127.240.219 18.139.6.69 18.140.184.0 3.106.6.1 maxretry = 50 [418] filter = 418 enabled = true maxretry = 25 action = iptables-allports ndn-central-action[cluster=fail2ban_homie_host, name=418] logpath = /var/log/apache2/apache2-*.mega.log [wp] action = iptables-allports ndn-central-action[cluster=fail2ban_homie_host, name=wp] filter = wp enabled = false logpath = /var/log/apache2/apache2-*.mega.log maxretry = 21 [mysqld-auth] action = iptables-allports logpath = /var/log/mysql/mysql.*.err /var/log/auth.log maxretry = 10 enabled = true Save