Inicio Explorar Axuda
Iniciar sesión
epsylon
/
Elgg-Lorea-Hydra
Seguir 1
Destacar 0
Fork 0
Ficheiros Incidencias 0 Pull Requests 0
Árbore: e48014c2e0
Ramas Etiquetas
Elgg-Lorea-H...
/
mod
/
elgg-fail2ban
psy e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra %!s(int64=6) %!d(string=hai) anos
..
actions e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra %!s(int64=6) %!d(string=hai) anos
Readme.md e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra %!s(int64=6) %!d(string=hai) anos
elgg.conf e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra %!s(int64=6) %!d(string=hai) anos
manifest.xml e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra %!s(int64=6) %!d(string=hai) anos
start.php e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra %!s(int64=6) %!d(string=hai) anos

Readme.md

Elgg Fail2Ban Support

This is a very small plugin adds Fail2Ban http://www.fail2ban.org intrusion detection hooks into Elgg.

Why?

Although Elgg has a per-user password failure lockout, this is pretty basic and doesn't protect a user from trying multiple different username/password combinations.

Fail2Ban is much more comprehensive, and will, when properly configured, block attacks from a whole IP.

Installation

  • Install the plugin into your /mod directory and activate it.
  • Copy the elgg.conf file to your fail2ban filters directory (usually, /etc/fail2ban/filter.d/)
  • Create a rule in your jail.local, along the lines of:
[elgg]
enabled = true
filter  = elgg
logpath = /var/log/auth.log
port    = all

See