jeans/home-assistant.io
jeans/home-assistant.io
1
0
Fork 0
mirror of https://github.com/home-assistant/home-assistant.io.git synced 2025-07-15 05:16:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update fail2ban.markdown (#3503)

Browse Source 
Please update this reference according to the last additions made in the original topic :https://community.home-assistant.io/t/is-there-a-log-file-for-invalid-logins-blocking-hackers/2892/16
This commit is contained in:
jodur 2017-10-11 08:30:32 +02:00 committed by Fabian Affolter
parent 2faf1a118c
commit 8c8d93a1e4
No known key found for this signature in database
GPG Key ID: DDF3D6F44AAB1336
1 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
source/_cookbook/fail2ban.markdown
View File

@ -20,7 +20,7 @@ Then make sure logging is enabled in your `configuration.yaml` file for your Hom
logger: logger:
default: critical default: critical
logs: logs:
homeassistant.components.http: warning homeassistant.components.http.ban: warning
``` ```
Next we will be creating these three files : Next we will be creating these three files :
@ -43,12 +43,9 @@ Contents of `/etc/fail2ban/filter.d/hass.local`:
before = common.conf before = common.conf
[Definition] [Definition]
failregex = ^%(__prefix_line)s.*Login attempt or request with an invalid password from <HOST>.*$ failregex = ^%(__prefix_line)s.*Login attempt or request with invalid authentication from <HOST>.*$
ignoreregex = ignoreregex =
[Init]
datepattern = ^%%y-%%m-%%d %%H:%%M:%%S
``` ```
Contents of `/etc/fail2ban/jail.local` (Note that you'll need to change the `logpath` to match your logfile which will be different from the path listed.): Contents of `/etc/fail2ban/jail.local` (Note that you'll need to change the `logpath` to match your logfile which will be different from the path listed.):
@ -58,7 +55,7 @@ Contents of `/etc/fail2ban/jail.local` (Note that you'll need to change the `log
enabled = true enabled = true
filter = hass filter = hass
action = iptables-allports[name=HASS] action = iptables-allports[name=HASS]
logpath = /opt/hass-prod-cfg/home-assistant.log logpath = /home/homeassistant/.homeassistant/home-assistant.log
maxretry = 5 maxretry = 5
``` ```