Startsida Utforska Hjälp
Logga in
epsylon
/
Elgg-Lorea-Hydra
Bevaka 1
Stjärnmärk 0
Fork 0
Filer Ärenden 0 Pull-förfrågningar 0
Träd: e48014c2e0
Grenar Taggar
Elgg-Lorea-H...
/
mod
/
elgg-fail2ban
psy e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra 6 år sedan
..
actions e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra 6 år sedan
Readme.md e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra 6 år sedan
elgg.conf e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra 6 år sedan
manifest.xml e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra 6 år sedan
start.php e48014c2e0 moved from https://github.com/epsylon/Elgg-Lorea-Hydra 6 år sedan

Readme.md

Elgg Fail2Ban Support

This is a very small plugin adds Fail2Ban http://www.fail2ban.org intrusion detection hooks into Elgg.

Why?

Although Elgg has a per-user password failure lockout, this is pretty basic and doesn't protect a user from trying multiple different username/password combinations.

Fail2Ban is much more comprehensive, and will, when properly configured, block attacks from a whole IP.

Installation

  • Install the plugin into your /mod directory and activate it.
  • Copy the elgg.conf file to your fail2ban filters directory (usually, /etc/fail2ban/filter.d/)
  • Create a rule in your jail.local, along the lines of:
[elgg]
enabled = true
filter  = elgg
logpath = /var/log/auth.log
port    = all

See