diff --git a/fail2ban/README.md b/fail2ban/README.md deleted file mode 100644 index 7783cbd6..00000000 --- a/fail2ban/README.md +++ /dev/null @@ -1,3 +0,0 @@ -# Fail2ban - -:warning: We recommend using the [built-in defender](../docs/defender.md) instead of Fail2ban. diff --git a/fail2ban/filters/sftpgo.conf b/fail2ban/filters/sftpgo.conf deleted file mode 100644 index a8521b16..00000000 --- a/fail2ban/filters/sftpgo.conf +++ /dev/null @@ -1,15 +0,0 @@ -[INCLUDES] -before = common.conf - -[DEFAULT] -_daemon = sftpgo - -[Definition] - -# By default, first authenticate method is public_key and must be excluded from the filter to avoid false positives failed attempts -failregex = ^.*"sender":"connection_failed","client_ip":"","username":".*","login_type":"password".*"}$ - -ignoreregex = - -[Init] -journalmatch = _SYSTEMD_UNIT=sftpgo.service + _COMM=sftpgo diff --git a/fail2ban/jails/sftpgo.conf b/fail2ban/jails/sftpgo.conf deleted file mode 100644 index f7f7643c..00000000 --- a/fail2ban/jails/sftpgo.conf +++ /dev/null @@ -1,10 +0,0 @@ -[sftpgo] -enabled = true -port = 2022 -filter = sftpgo -action = iptables-allports[name=sftpgo] -logpath = -backend = systemd -maxretry = 5 -bantime = 600 -findtime = 86400