Das offizielle KeyHelp Forum der Keyweb AG / The official KeyHelp forum of Keyweb AG
https://community.keyhelp.de/
Code: Select all
fail2ban-client --vCode: Select all
fail2ban-client statusAlexander wrote: ↑Mon 3. Jan 2022, 11:50 Hallo,
welche Fail2Ban-Client Version kommt zum Einsatz?
Fail2Ban v1.0.1.dev1Code: Select all
fail2ban-client --v
Was sagt zum Beispiel folgender Befehl:
Code: Select all
fail2ban-client statusWie sieht der Inhalt der Datei /etc/sudoers.d/keyhelp aus?Code: Select all
Status |- Number of jail: 9 `- Jail list: apache-fakegooglebot, apache-modsecurity, apache-shellshock, php-url-fopen, postfix, proftpd, pure-ftpd, sendmail-auth, sshd
Code: Select all
# Manage system services
keyhelp ALL = (ALL) NOPASSWD: /usr/sbin/service
# Mail queue management
keyhelp ALL = (ALL) NOPASSWD: /usr/sbin/postsuper
# Server reboot
keyhelp ALL = (ALL) NOPASSWD: /sbin/reboot
# Process management
keyhelp ALL = (ALL) NOPASSWD: /bin/kill
# Disk usage
keyhelp ALL = (ALL) NOPASSWD: /usr/bin/du
keyhelp ALL = (ALL) NOPASSWD: /bin/ls
# Firewall
keyhelp ALL = (ALL) NOPASSWD: /usr/sbin/iptables, /sbin/iptables
keyhelp ALL = (ALL) NOPASSWD: /usr/sbin/iptables-restore, /sbin/iptables-restore
keyhelp ALL = (ALL) NOPASSWD: /usr/sbin/iptables-save, /sbin/iptables-save
keyhelp ALL = (ALL) NOPASSWD: /usr/sbin/ip6tables, /sbin/ip6tables
keyhelp ALL = (ALL) NOPASSWD: /usr/sbin/ip6tables-restore, /sbin/ip6tables-restore
keyhelp ALL = (ALL) NOPASSWD: /usr/sbin/ip6tables-save, /sbin/ip6tables-save
# Dovecot active sessions
keyhelp ALL = (root) NOPASSWD: /usr/bin/doveadm who
# API - Export account system passwords
keyhelp ALL = (ALL) NOPASSWD: /usr/bin/getent
# Backup
keyhelp ALL = (ALL) NOPASSWD:SETENV: /usr/local/bin/restic
keyhelp ALL = (ALL) NOPASSWD: /bin/chown
# Fail2Ban management
keyhelp ALL = (ALL) NOPASSWD: /usr/bin/fail2ban-client
# Last line must be empty, do not trim!