add ssh-ddos jail

11 years ago · a04440c3b2
parent 14170ae297
commit a04440c3b2
1 changed files with 12 additions and 0 deletions
--- a/root/etc/e-smith/templates/etc/fail2ban/jail.conf/30Service10ssh
+++ b/root/etc/e-smith/templates/etc/fail2ban/jail.conf/30Service10ssh
@ -15,4 +15,16 @@ EOF
 $OUT .= "           smeserver-sendmail[name=\"SSH\",dest=$maildest]\n"
    if ($mail eq 'enabled');

+$OUT .=<<"EOF";
+
+[ssh-ddos]
+enabled  = true
+filter   = sshd-ddos
+logpath  = /var/log/sshd/current
+action   = smeserver-iptables[port="$port",protocol=tcp,bantime=$bantime]
+EOF
+
+$OUT .= "           smeserver-sendmail[name=\"SSH\",dest=$maildest]\n"
+    if ($mail eq 'enabled');
+
 }