4

I've seen instructions for configuring fail2ban on BSD using pf but I'm not sure how these can be adapted to configure the fail2ban rules that ship with homebrew to configure Yosemite's firewall for safety.

What changes do I need to make, and to which files, to enable fail2ban safely on my OSX server?

Improve this question
3
  • I'd really prefer NOT to change my question. I have both Yosemite and El Capitan in my network, so both are pertinent answers.
    – Chris R
    Commented Sep 30, 2015 at 13:45
  • I'll hold off on closing this for a while as too broad. We strongly prefer one question per question. Let's discuss site policy on Ask Different Meta if the close reasons don't make sense to you... Also, how far have you gotten? What error do you receive when you start the app?
    – bmike ♦
    Commented Sep 30, 2015 at 13:49
  • @ChrisR I have already answered a similar question regarding the non-homebrew fail2ban in the question here. Please check if the answer helps. If you have problems with the answer (beyond adapting some config files and paths), please specify this in your question here.
    – klanomath
    Commented Sep 30, 2015 at 14:20

1 Answer 1

Reset to default
1

If you are running the macosx server product (as well as running macosx as a server), you can try activating the adaptive firewall (man afctl(8)). It is a tool that watches for auth failures and blocks the originating host for a short time. Not quite as flexible as fail2ban but catches some of the services that don't log auth failures.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .