Re: [Fail2ban-users] Command line ban all failures?

[Harold Hallikainen via Fail2ban-users]

On Mon, March 14, 2022 12:13 pm, Doug Preston via Fail2ban-users wrote:
> Bans for 1 failed login.  If you typo your userid or password on my
> systems your ip is banned.  I also only allow keys for authentications
> so if you try a password you don't belong here.
>
> [ssh-iptables]
>
> enabled  = false
> filter   = sshd
> action   = iptables[name=SSH, port=ssh, protocol=tcp]
>             sendmail-whois[name=SSH, dest=me@domain,
> sender=fail2ban@domain]
> logpath  = /var/log/secure
> mode = aggressive
> maxretry = 1
> bantime = 1209600
>
>

Thanks! I have my maxretry set at 3 so I don't lock myself out. What I'd
like is a command line method of setting maxretry to 1, running fail2ban
on the log, but have the cron job continue to use 3. I guess I could
manually change stuff back and forth or write a shell script. But, it'd be
nice to just have a command line argument that overrode the maxretry for
that one run.

Harold


-- 
FCC Rules Updated Daily at http://www.hallikainen.com
Not sent from an iPhone.


_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users