This is the old XigmaNAS forum in read only mode,
it will taken offline by the end of march 2021!



I like to aks Users and Admins to rewrite/take over important post from here into the new fresh main forum!
Its not possible for us to export from here and import it to the main forum!

DenyHost / SSH Guard

Post/Debate your Suggestions & Requests of XigmaNAS here. This ONLY pertains to XigmaNAS.
Forum rules
Set-Up GuideFAQsForum Rules
Post Reply
jpancrazio
NewUser
NewUser
Posts: 2
Joined: 28 Oct 2012 14:51
Status: Offline

DenyHost / SSH Guard

Post by jpancrazio »

Hello all.. Long time nas4free ... freenas user ... I looked around quickly and didnt see either of these, was wondering if it would be possible to add something to help with protecting the SSH login from to many failed attempt.. I also use PFSense, and use deny hosts on it..

Just my 2 cents.. thanks

User avatar
alexey123
Moderator
Moderator
Posts: 1469
Joined: 19 Aug 2012 08:22
Location: Israel, Karmiel
Contact:
Status: Offline

Re: DenyHost / SSH Guard

Post by alexey123 »

You can use fail2ban, but if you have full version.
Manual
Home12.1.0.4 - Ingva (revision 7091)/ x64-embedded on AMD A8-7600 Radeon R7 A88XM-PLUS/ 16G RAM / UPS Ippon Back Power Pro 600
Lab 12.1.0.4 - Ingva (revision 7091) /x64-embedded on Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz / H61M-DS2 / 4G RAM / UPS Ippon Back Power Pro 600

jpancrazio
NewUser
NewUser
Posts: 2
Joined: 28 Oct 2012 14:51
Status: Offline

Re: DenyHost / SSH Guard

Post by jpancrazio »

Thanks Alexey123 .. Sorry was looking for the wrong names then.. I will try this out.. thanks!

User avatar
alexey123
Moderator
Moderator
Posts: 1469
Joined: 19 Aug 2012 08:22
Location: Israel, Karmiel
Contact:
Status: Offline

Re: DenyHost / SSH Guard

Post by alexey123 »

jpancrazio wrote:Thanks Alexey123 .. Sorry was looking for the wrong names then.. I will try this out.. thanks!
I not agree with "wrong name". When I begin attach fail2ban to NAS4Free ( FreeNAS), I also tried SSH Guard, but without success.
fail2ban more flexible, it can be made to monitor any log file, such owncloud, webserver..
Home12.1.0.4 - Ingva (revision 7091)/ x64-embedded on AMD A8-7600 Radeon R7 A88XM-PLUS/ 16G RAM / UPS Ippon Back Power Pro 600
Lab 12.1.0.4 - Ingva (revision 7091) /x64-embedded on Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz / H61M-DS2 / 4G RAM / UPS Ippon Back Power Pro 600

g---man
NewUser
NewUser
Posts: 5
Joined: 04 Jul 2013 20:19
Location: NYC
Status: Offline

Re: DenyHost / SSH Guard

Post by g---man »

Synology has something similar, works pretty well.

Anyhow, can fail2ban work from jail on embedded setup?

If not - any recommendations for embedded setup?
HP N54L, 10GB RAM, 100MB Network
9.1.0.1 - Sandstorm (revision 845)
TheBrig
ZFS, RAIDZ, 3 WD 3TB Reds (offsite backup to Synology)

dundermiflin
Starter
Starter
Posts: 27
Joined: 12 Oct 2013 14:11
Status: Offline

Re: DenyHost / SSH Guard

Post by dundermiflin »

g---man wrote:Synology has something similar, works pretty well.

Anyhow, can fail2ban work from jail on embedded setup?

If not - any recommendations for embedded setup?
I've spent the last two weeks trying to follow this and others tutorials to protect my Embedded Nas4Free with fail2ban into a jail and no luck......

it will be great if someone can help us to a step-by-step tutorial on how to correctly setup fail2ban into a jail protecting our server

User avatar
alexey123
Moderator
Moderator
Posts: 1469
Joined: 19 Aug 2012 08:22
Location: Israel, Karmiel
Contact:
Status: Offline

Re: DenyHost / SSH Guard

Post by alexey123 »

dundermiflin wrote:
g---man wrote:
I've spent the last two weeks trying to follow this and others tutorials to protect my Embedded Nas4Free with fail2ban into a jail and no luck......

it will be great if someone can help us to a step-by-step tutorial on how to correctly setup fail2ban into a jail protecting our server
See my posts
Home12.1.0.4 - Ingva (revision 7091)/ x64-embedded on AMD A8-7600 Radeon R7 A88XM-PLUS/ 16G RAM / UPS Ippon Back Power Pro 600
Lab 12.1.0.4 - Ingva (revision 7091) /x64-embedded on Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz / H61M-DS2 / 4G RAM / UPS Ippon Back Power Pro 600

dundermiflin
Starter
Starter
Posts: 27
Joined: 12 Oct 2013 14:11
Status: Offline

Re: DenyHost / SSH Guard

Post by dundermiflin »

alexey123 wrote:
dundermiflin wrote:
g---man wrote:
I've spent the last two weeks trying to follow this and others tutorials to protect my Embedded Nas4Free with fail2ban into a jail and no luck......

it will be great if someone can help us to a step-by-step tutorial on how to correctly setup fail2ban into a jail protecting our server
See my posts
I already did alexey
Of course adapting your ip 10.0.0.1 to my NAS server (ip 192.168.1.222) but it didn't work .... I tried to login with wrong password and never ban me ...... Maybe I misunderstood some of the parts ( is not really clear where to modify the files jail or server)

My router makes DMZ to my nas4free server 192.168.1.222 (my jail is 192.168.1.224 name if Fail2Ban)

I left you a reply in your tutorial whit some of my LOG's and error msg when I execute your scripts

Post Reply

Return to “Suggestions & Requests”