I have dedicated my old MacBook as a home server. It runs, among other stuff, the following services:
- Webserver (Apache, PHP, MySQL) i.e. OwnCloud/WebDAV
- Torrent client
- SSH server
- Some game servers
Although a MacBook is not the best hardware for the job, this works fine for private use and I have my backups running for the inevitable crash.
To keep unwanted people out, I have a 'normal' firewall and
Fail2ban scans log files (e.g. /var/log/apache/error_log) and bans IPs that show the malicious signs -- too many password failures, seeking for exploits, etc. Generally Fail2Ban is then used to update firewall rules to reject the IP addresses for a specified amount of time, although any arbitrary other action (e.g. sending an email) could also be configured. Out of the box Fail2Ban comes with filters for various services (apache, courier, ssh, etc).
fail2ban up is done by modifying different configuration files. In these files you can state 'which' log file to scan, what to look for (regex), and, if a match is found, what action to take. But setting it up can be a real hassle and takes hours for a normal guy like myself.
Is there a good GUI or alternative for
fail2ban? The main purpose is to block unwanted users from my system. I prefer open-sourced solutions, but I am also willing to pay for good software.
note: I have the 'regular' OS X 10.6.8 running (i.e. I do NOT have OS X Server running)