Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Should fail2ban be the master of iptables rules? For example, should I setup my firewall rules along side the fail2ban rules, or should I have all my services configured and managed by fail2ban?

Regards

share|improve this question
5  
Fail2ban is not a firewall manager. As a matter of fact you cannot even remove banned IP's using fail2ban. So, you'll want to set your iptables configuration separate to that of fail2ban. And use fail2ban for what it was is meant to be used for; banning brute-force logon attempts. –  josten Aug 10 '13 at 0:45
add comment

1 Answer

fail2ban is not a firewall rule manager. Fail2ban is a piece of software that monitors log files for "failed" attempts to login to a device. If it see too many failed attempts, it will then "ban" the source by adding their IP address to firewall rules to prevent future connections.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.