Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[Flood UDP] bloquer les IP qui floodent avec fail2ban
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index French
View previous topic :: View next topic  
Author Message
Kevinos
n00b
n00b


Joined: 10 Nov 2011
Posts: 8
Location: belgique

PostPosted: Wed Feb 15, 2012 1:31 pm    Post subject: [Flood UDP] bloquer les IP qui floodent avec fail2ban Reply with quote

Bonjour tous le mondes

j'ai besion d'aide pour faire un filtre fail2ban

Je souhaite que fail2ban ban les ip qui s'affiche dans mon fichier log tcpdump voici un exemple.

Quote:
23:14:24.364974 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1068
23:14:24.377081 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1069
23:14:24.389183 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1069
23:14:24.406905 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1069
23:14:24.416931 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1068
23:14:24.430931 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1068
23:14:24.449243 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1079
23:14:24.449441 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1076
23:14:24.452976 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1056
23:14:24.364974 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1068
23:14:24.377081 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1069
23:14:24.389183 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1069
23:14:24.406905 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1069
23:14:24.416931 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1068
23:14:24.430931 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1068
23:14:24.449243 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1079
23:14:24.449441 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1076
23:14:24.452976 IP *.*.*.*.28960 > 91.121.**.**.28960: UDP, length 1056


ça serait cool que vous m'aider sur ca parce que j'en ais vraiment besoin

Merci a tous
_________________
http//team-area51.net
Back to top
View user's profile Send private message
k-root
Guru
Guru


Joined: 08 Jan 2005
Posts: 362
Location: Paris

PostPosted: Wed Feb 15, 2012 5:38 pm    Post subject: Reply with quote

http://www.fail2ban.org/wiki/index.php/Category:Configuration

c'est pour la partie expression reguliere que tu bloque ?
_________________
boozo wrote:
Gentoo, ça mange des ours et baffe des buffles par 37°C avec un bob et des tongs
Back to top
View user's profile Send private message
Kevinos
n00b
n00b


Joined: 10 Nov 2011
Posts: 8
Location: belgique

PostPosted: Wed Feb 15, 2012 6:38 pm    Post subject: Reply with quote

k-root wrote:
http://www.fail2ban.org/wiki/index.php/Category:Configuration

c'est pour la partie expression reguliere que tu bloque ?


C'est pour quand l'ip fait 2 3 fois length il ce fait bannir

je cherche de puis des jours mais je trouve pas
_________________
http//team-area51.net
Back to top
View user's profile Send private message
xaviermiller
Administrator
Administrator


Joined: 23 Jul 2004
Posts: 5621
Location: ~Brussels - Belgique

PostPosted: Wed Feb 15, 2012 8:15 pm    Post subject: Reply with quote

Bonjour,

Pourrais-tu mettre le titre de ton message en conformité avec le forum ?
Merci d'avance !
_________________
Kind regards,
Xavier Miller
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index French All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum