Tags Tags

[Samba] samba and fail2ban

March 23rd, 2011 - 08:40 am ET by Hajo Locke | Report spam
Help Create a new topic
Hello,

to stop bruteforce logins to samba i want to create a fail2ban-rule which
blocks IPs with to many login-errors.
unfortunately used logins and IPs in samba log are scattered to multiple
lines so i cant find a relation.
i use samba for wan and cant reduce to internal IPs.
What ist best in my case to get better logs or stop abusing?

Thanks,
Hajo

To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
email Follow the discussionReplies 3 repliesReplies Make a reply

Replies

#1 Hajo Locke
March 29th, 2011 - 03:00 am ET | Report spam
Hello,

to stop bruteforce logins to samba i want to create a fail2ban-rule which
blocks IPs with to many login-errors.
unfortunately used logins and IPs in samba log are scattered to multiple
lines so i cant find a relation.
i use samba for wan and cant reduce to internal IPs.
What ist best in my case to get better logs or stop abusing?



nobody has an idea? is there no possibility to get logs which show which ip
is doing too much false logins?

Thanks,
Hajo

To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Similar topics

Make your own search :