Accueil Explorer Aide
Connexion
epsylon
/
Elgg-Lorea-Hydra
Suivre 1
Voter 0
Fork 0
Fichiers Tickets 0 Pull Requests 0
Aborescence: e48014c2e0
Branches Tags
Elgg-Lorea-H...
/
mod
/
elgg-fail2ban
psy e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra il y a 6 ans
..
actions e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra il y a 6 ans
Readme.md e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra il y a 6 ans
elgg.conf e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra il y a 6 ans
manifest.xml e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra il y a 6 ans
start.php e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra il y a 6 ans

Readme.md

Elgg Fail2Ban Support

This is a very small plugin adds Fail2Ban http://www.fail2ban.org intrusion detection hooks into Elgg.

Why?

Although Elgg has a per-user password failure lockout, this is pretty basic and doesn't protect a user from trying multiple different username/password combinations.

Fail2Ban is much more comprehensive, and will, when properly configured, block attacks from a whole IP.

Installation

  • Install the plugin into your /mod directory and activate it.
  • Copy the elgg.conf file to your fail2ban filters directory (usually, /etc/fail2ban/filter.d/)
  • Create a rule in your jail.local, along the lines of:
[elgg]
enabled = true
filter  = elgg
logpath = /var/log/auth.log
port    = all

See