Fail2ban bantime.increment options in Webmin?

Webmin
1

To protect against mass attacks I used to setup a recidive jail that checked the fail2ban log.

Nowadays fail2ban has a built in solution against mass attacks: bantime.increment, bantime.factor, etc. The more failed tries the longer the ban. It allows a few more attempts for normal users while killing bots that try much more through exponential growing ban times.

I can add these manually in the fail2ban.local, but it would be nice if:

a) They are configurable in Webmin (default and per jail)

  • bantime.increment
  • bantime.factor
  • bantime.maxtime
  • bantime.overalljails
  • bantime.rndtime

b) Switched on by default to have a more hardened setup out of the box for those who do not dive directly in the settings.

2

Just found out that the recidive jail is part of the standard fail2ban setup. I mistakenly though I set it up manually a few years ago.

Still would be nice to be able to tweak the bantime.increment settings

3 
fail2ban-client set <JAIL> banip <IP>

Was one of my past favourites.

Days gone bye when I was constantly watching my clients servers.

Just drop the scumbags.

David

4

I know a few years ago I did. I’m not sure but the defaults are still probably distro specific but I don’t know that for certain.

5

Thanks for the nice heads-up!

The upcoming Webmin 2.654 update will include all these new features. If you want to test it now, just apply the following patch:

webmin patch https://github.com/webmin/webmin/commit/0a92881
6

Wow that was quick. You guys rule :smiling_face_with_sunglasses:

Works fine here