Skip to content

Instantly share code, notes, and snippets.

@sandys

sandys/fail2ban-rdp.md

Created September 8, 2024 09:43
Show Gist options
  • Save sandys/f8578ba4d4d93d85cb7385ddba8b5331 to your computer and use it in GitHub Desktop.
Save sandys/f8578ba4d4d93d85cb7385ddba8b5331 to your computer and use it in GitHub Desktop.
Download ZIP
fail2ban rdp
Raw
fail2ban-rdp.md

[rdp] enabled = true filter = rdp action = iptables-multiport[name=rdp, port="3389,3390,3391", protocol=tcp] logpath = /var/log/xrdp.log maxretry = 5

filter filter.d/rdp.conf

[Definition] failregex = connection received from ignoreregex = datepattern = %%Y%%m%%d-%%H:%%M:%%S

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment