Fail2ban

Post by **Stavros** » 07 Apr 2010, 11:54

Okay, I know that I can use Fail2ban on things like ssh, sftp etc. What I want to know is can it be used on a custom login page? For my capstone class my group is working on is basically an online check register. It's not pretty, but if you want to look it's

Code: Select all

trigulus.dyndns.org

You can sign up. It doesn't send you an email (although we had it planned).

Post by **Big-E** » 07 Apr 2010, 13:23

Give me a shout on MSN, I can give you some possible options.

Post by **bad_brain** » 07 Apr 2010, 14:17

you can secure pretty any login with it. simply check the access log for the reply for a failed login attempt, and with a little regex you set up a rule that makes fail2ban check the access log for that specific string ("failregex" variable)...