Nethserver-fail2ban needs testers

Thank you so much, you saved my day :slight_smile:

4 Likes

I just installed and configured without issues F2B for NS7 from @stephdl repository!

The stephdl repository is opened

Thank you Stephane!
:trophy:

4 Likes

It works (NS 7b2)!

First ban!

3 Likes

@stephdl I’d like to move this great rpm on NethForge! So you can earn some money for your work and the community has a great new module in his pocket!

5 Likes

any idea on when that is to be released? (F2B itself, I don’t use nextcloud)

Already done!
The stephdl repository is opened

Is that an ‘official’ NS-repo? Will it be released in the default repo’s, or will it stay in this repo only?

For now, will be stay here.
You can use it safety!

2 Likes

Sir! You’ve made my day. :slight_smile: I was looking for Fail2Ban on NS7 and then I’ve luckily found your topic. I can assure you I’ll be using NS7 from today on a small office network as gatewas to the internet, so DHCP, Firewall and OFC Fail2Ban. May I ask what information you require to be shared for furhter developement?

BTW: One small observation for the webconfig. When I click the jails to see what options do they have, I can’t close the dropdown menu. Maybe you should use a simple dropdown menu for each jail type?

Bert :slight_smile:

1 Like

@stephdl, I observed the same but workarounded it wrapping each jail in an element list, IIRC. Not sure it was the right way.

It looks good on desktop but IIRC not so on mobile due to the groups columns.

Also, as others noted, the email messages were a bit annoying.

Overall a great work! :heart_eyes:

Can you share the code you modified ?

Will look for it when I get home this night.

1 Like

Yep you speak for all the fail2ban starting jails ?

Excerpt: wrapping a jail group within an elementList():

->insert( $view->fieldset(NULL, $view::FIELDSET_EXPANDABLE)->setAttribute('template', $T('NginxStatus_label'))
    ->insert( $view->elementList()
        ->insert($view->checkBox('NginxHttpAuth_status', 'true')->setAttribute('uncheckedValue', 'false'))
        ->insert($view->checkBox('NginxBotSearch_status', 'true')->setAttribute('uncheckedValue', 'false'))
    )
)

On December I did some other noobie tests, mangling some elements… but didn’t go anywhere…
Test 1:

Test 2:

2 Likes

Exactly.

at the time it was not possible to filter (by fail2ban) what mails to send :’(

Maybe it could be searched now :slight_smile:

what do you think to add your modifications with another Tab. It will add more spaces !

Some clues @dnutan if you want help in fail2ban, I will prefer that it was not enabled by default because it is a trick but we can either put a db property or a check box.

FYI the fail2ban service is restarted after runlevel-adjust (after an installation/removal) because we need to expand a new jail following a specific log.

3 Likes

If the number of jails grow I’d consider moving them to its own tab, but not sure it’s worth at the moment.

4 Likes

Un message a été déplacé vers un nouveau sujet : Openvpn jail for fail2ban