Softether integration into fail2ban

[r00igev@@r]

Anyone succeeded in doing this config?

 

[HavocXphere]

You can probably just follow the guidance on the individual protocol you're using. e.g. openvpn

GitHub - fail2ban/fail2ban: Daemon to ban hosts that cause multiple authentication errors

Daemon to ban hosts that cause multiple authentication errors - fail2ban/fail2ban

www.fail2ban.org

I'd question the benefit though. If you're authenticating via keys then adding fail2ban isn't gonna add much benefit and if you're authenticating via password well then you should maybe reconsider that rather than band-aid'ing it with fail2ban

 

[r00igev@@r]

You can probably just follow the guidance on the individual protocol you're using. e.g. openvpn

GitHub - fail2ban/fail2ban: Daemon to ban hosts that cause multiple authentication errors

Daemon to ban hosts that cause multiple authentication errors - fail2ban/fail2ban

www.fail2ban.org

I'd question the benefit though. If you're authenticating via keys then adding fail2ban isn't gonna add much benefit and if you're authenticating via password well then you should maybe reconsider that rather than band-aid'ing it with fail2ban

Yes you are correct but the buggers still try and then fill up the logs. Fail2ban helps me report them to block.de and then I use an IPSET blocklist with firewalld to drop the buggers.
I finally figured it out.
I needed to create a link to the sec_20200712.log file as sec.log and used a timer to recreate the link each day.

 

[r00igev@@r]

Working using this link: https://www.vpnusers.com/viewtopic.php?t=6375

Main thing is the log file are: /usr/local/libexec/softether/vpnserver/security_log/*/sec_*.log