Setup Fail2Ban on FreeBSD

Bauer, Aaron J. AARON.J.BAUER at saic.com
Mon Apr 26 17:06:30 UTC 2010


I only have one problem with this.  Ports is disabled in FreeNAS, and so I performed the install through pkg_add.  When I run the /usr/local/etc/rc.d/fail2ban start, I get "command not found"

Aaron 
Software Research Intern 
Aaron.J.Bauer at SAIC.com




From: Chris Rees
Sent: Sat 4/24/2010 11:32 AM
To: Bauer, Aaron J.
Cc: freebsd-questions at freebsd.org
Subject: Re: Setup Fail2Ban on FreeBSD


On 23 April 2010 18:49, Bauer, Aaron J. <AARON.J.BAUER at saic.com> wrote:
> I am currently using FreeNAS 0.7 for a file server.  I have multiple SSH bruteforce attacks each week, and wish to use fail2ban to prevent this.
>
> I don't have much experience with BSD, and am having trouble getting everything to work.  I ran pkg_add -r python25 and pkg_add -r py25-fail2ban.  I now have all the files for Fail2Ban, and did the cp jail.conf jail.local as the other distro's for linux use.
>
> However, how do I start using fail2ban?  I have configured it for CentOS and Ubuntu, and it starts in init.d.  I don't know how to add it to /etc/rc.d to get it to work correctly..
>
> Any help is greatly appreciated.  If you need more info, please let me know.
>
> Aaron
> Software Research Intern
> Aaron.J.Bauer at SAIC.com


What everyone else has missed out is that ports install their rc files
into /usr/local/etc/rc.d, rather than /etc which is reserved for the
base system. Fail2ban already installs an rc.d script, so you don't
need to do anything.

So, /etc/rc.conf can be used, and add

fail2ban_enable="YES"

Then from the prompt run:

# /usr/local/etc/rc.d/fail2ban start

Chris


More information about the freebsd-questions mailing list