Stealth In the future, we will release our own security plugin.
How to use fail2ban to protect host security and sites under aapanel
aaPanel_Jose great
aaPanel_Jose Hello Joe
we have now increased DDoS reflection / amplification attacks that are the obvious cause of DNS management - there are specific reasons for this - are the open resolvers in the
Network area intended?
CQT
If your dns manager is only for private networks, you can set the listen ip to a private network address.
Wow, thanks. but need add this to aaPanel (app store)
aaPanel_Jose where this plugin i search alot for security plugin and not found
mohamed-hamed
We will join as soon as possible
Hi @aaPanel_Jose just wondering, why not create droplets on google, digitaloncean and aws with the panel and affiliate links. Also why not use cloudflare as a plugin instead of fail to ban also with affiliate links? Since cloudflare does the same thing as fail to ban and most of us will end up using it, it would be nice if you got a affiliate fee for us signing up.
virgiltu
Sorry, I don't know very well.
why not create droplets on google, digitaloncean and aws with the panel and affiliate links
droplets οΌ
affiliate linksοΌ
- Edited
aaPanel_Jose sure thing, here go to this link.
https://aws.amazon.com/marketplace/b/2649367011?ref_=hmpg_categories_2649367011
google and digital ocean have similar market places. The way it works, install centos on a server with aaPanel and all the settings and put a price on it. Lets say 0.005$ per hour. This means that if i go and install that because I do not want to go through the hassle to do it, I pay create a server and select the image you created. Since you did it, I know it is done correct with all the securities in place. At the end of the month I pay my bill to AWS lets say 15$ and you get 5$ for every month I use that server. Kind of a good deal. Here is the digital ocean one https://marketplace.digitalocean.com/category/developer-tools
Affiliate links
For cloudflare sign up here https://www.cloudflare.com/partners/ . Than create a module that allows people to connect their server domains with cloudflare. It is free for users, but if any of us sign up than you get a finder fee of 25$ or something like that. It might have changed.
Honestly nobody should be running any site without cloudflare.
Also please make a module that allow me to create users and give them access over one or a few domains. This would be very nice to have.
Just a though. cheers.
virgiltu
Thank you very much, the module you mentioned, we will reply to you after discussion.
After all:
[root@localhost fail2ban]# fail2ban-client reload
2019-10-23 12:51:53,555 fail2ban.configreader [23429]: ERROR Found no accessible config files for 'filter.d/sshd #Rule name, you must fill in the rules in the filter.d directory, sshd is the built-in rule of fail2ban' under /etc/fail2ban
2019-10-23 12:51:53,555 fail2ban.jailreader [23429]: ERROR Unable to read the filter 'sshd #Rule name, you must fill in the rules in the filter.d directory, sshd is the built-in rule of fail2ban'
2019-10-23 12:51:53,555 fail2ban.jailsreader [23429]: ERROR Errors in jail 'sshd'. Skipping...
Stealth just did the tuto and got the same error ?? no answer yet ??
Stealth So what did you do instead ?? run the wordpress extension of fail2ban ?? i'm still looking at this elsewhere to see if we did something wrong...
- Edited
Only this step, before WP or anything else:
fail2ban-client reload
I try [sshd] or [ssh] like in world anywhere, not help...
I think this is bad:
[DEFAULT]
ignoreip = 127.0.0.1/8
bantime = 60
findtime = 600
maxretry = 5
banaction = firewallcmd-ipset
action = %(action_mwl)s
[sshd]
enabled = true
filter = sshd
port = 22
action = %(action_mwl)s
logpath = /var/log/secure
Just downloaded the latest version of aapanel and He added a fail2ban app !!!! So this is cleared !!
That is okay, but only for nginx is it