| View previous topic :: View next topic |
| Author |
Message |
Kevinos
n00b
Joined: 10 Nov 2011
Posts: 8
Location: belgique
|
 Posted: Wed Feb 15, 2012 1:31 pm Post subject: [Flood UDP] bloquer les IP qui floodent avec fail2ban |
 |
|
Bonjour tous le mondes
j'ai besion d'aide pour faire un filtre fail2ban
Je souhaite que fail2ban ban les ip qui s'affiche dans mon fichier log tcpdump voici un exemple.
| Quote: | 23:14:24.364974 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1068
23:14:24.377081 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1069
23:14:24.389183 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1069
23:14:24.406905 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1069
23:14:24.416931 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1068
23:14:24.430931 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1068
23:14:24.449243 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1079
23:14:24.449441 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1076
23:14:24.452976 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1056
23:14:24.364974 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1068
23:14:24.377081 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1069
23:14:24.389183 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1069
23:14:24.406905 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1069
23:14:24.416931 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1068
23:14:24.430931 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1068
23:14:24.449243 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1079
23:14:24.449441 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1076
23:14:24.452976 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1056 |
ça serait cool que vous m'aider sur ca parce que j'en ais vraiment besoin
Merci a tous
_________________
http//team-area51.net |
|
| Back to top |
|
 |
k-root
Guru
Joined: 08 Jan 2005
Posts: 300
Location: Paris
|
|
| Back to top |
|
|
Kevinos
n00b
Joined: 10 Nov 2011
Posts: 8
Location: belgique
|
| Posted: Wed Feb 15, 2012 6:38 pm Post subject: |
|
|
| k-root wrote: | http://www.fail2ban.org/wiki/index.php/Category:Configuration
c'est pour la partie expression reguliere que tu bloque ? |
C'est pour quand l'ip fait 2 3 fois length il ce fait bannir
je cherche de puis des jours mais je trouve pas
_________________
http//team-area51.net |
|
| Back to top |
|
|
XavierMiller
Moderator
Joined: 23 Jul 2004
Posts: 4676
Location: ~Brussels - Belgique
|
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
French
