sysPASS Fail2Ban Configuration

Readme.md

This is the needed fail2ban configuration to block offending clients for sysPass Password Manager. For this to work, you will need all the changes introduced in https://github.com/wendelb/sysPass .

Installation

• Put the file filter.d-sysPass.local into /etc/fail2ban/filter.d
• Put the file jail.d-sysPass.local into /etc/fail2ban/jail.d
• Enable Fail2Ban-Logging in sysPass

You are good to go!

filter.d-sysPass.local

# Fail2Ban configuration file for sysPass
# http://syspass.org
#
#

[INCLUDES]

before = common.conf

[Definition]

failregex = sysPASS.+Authentication from \[<HOST>\] failed

ignoreregex =
# DEV Notes:
#
# Author: Bernhard Wendel

jail.d-sysPass.local

[sysPass]

enabled  = true
port     = https
filter   = sysPass
logpath  = /var/log/auth.log
maxretry = 5