| commit | author | age | ||
| 3a37e6 | 1 | . |
| T | 2 | .TH vilain 28 "March 2017" "" "Fail2ban-like for OpenBSD" |
| 3 | .SH NAME | |
| 4 | vilain \- fail2ban-like for OpenBSD | |
| 5 | . | |
| 6 | .SH SYNOPSIS | |
| 7 | .RS | |
| 8 | To use vilain : | |
| 9 | 1. Copy configuration file in /etc/vilain.conf and configure according to your needs. | |
| 10 | 2. Configure pf according to the example below | |
| 11 | 3. start vilain via rcctl | |
| 12 | You only need python >= 3.5 to use it. | |
| 13 | .RE | |
| 14 | ||
| 15 | .SH DESCRIPTION | |
| 16 | .RS | |
| 17 | In pf.conf, add according to your configuration : | |
| 18 | ||
| 19 | table <vilain_bruteforce> persist | |
| 20 | block quick from <vilain_bruteforce> | |
| 21 | ||
| 22 | You might want to add a cron task to remove old banned IP. As example, to ban for one day max : | |
| 23 | ||
| 24 | pfctl -t vilain_bruteforce -T expire 86400 | |
| 25 | ||
| 26 | To see banned IP : | |
| 27 | ||
| 28 | pfctl -t vilain_bruteforce -T show | |
| 29 | .RE | |
| 30 | ||
| 31 | .SH LOGS | |
| 32 | .RS | |
| 33 | Watch vilain logs in /var/log/daemon. | |
| 34 | .RE | |
| 35 | ||
| 36 | ||
| 37 | .SH BUGS | |
| 38 | .RS | |
| 39 | Please let me know : <thuban@yeuxdelibad.net> | |
| 40 | .RE | |
| 41 | ||
