Fail2ban
Log-watching daemon that bans addresses after repeated authentication failures.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
1 more ways to get Fail2ban
Package managers
- Homebrew
brew install fail2ban
About Fail2ban
Fail2ban tails log files, matches failure patterns with per-service filters and adds firewall rules to block the offending address for a configurable period. Jails ship for SSH, web servers, mail servers and many applications, and actions can notify as well as ban.
Strengths
- Cuts SSH and web brute-force noise dramatically with one jail enabled
- Filters and actions are plain configuration files, easy to extend
Limitations
- Regex-based log parsing breaks when a service changes its log format
- Only reacts after failures are logged; it is not a preventive control
Details
- Pricing
- FreeThe open-source software is available without a license fee. Hosting, hardware and external services are separate.
- License
- GPL-2.0
- Developer
- The Fail2ban contributors
- Platforms
- Linux, Self-hosted, Command line
- How it runs
- Self-hosted
- Best suited for
- Log-watching daemon that bans addresses after repeated authentication failures
- Categories
- Security tools
- Last verified
- Added
- Provenance
- Selected from the TechWalrus Resource Hub (Self-Hosting & Homelab); facts checked against the developer's own pages, 3 sources on file.