OSCam absichern (Ubuntu 18.04): Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
(→Links) |
|||
| (5 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt) | |||
| Zeile 9: | Zeile 9: | ||
<pre> | <pre> | ||
# failban | |||
failbancount = 0 # Anzahl der erlaubten Fehlversuche mit falschen Zugangsdaten. | failbancount = 0 # Anzahl der erlaubten Fehlversuche mit falschen Zugangsdaten. | ||
failbantime = 1440 # IP Adresse wird für 1440 Minuten (1 Tag) geblockt | failbantime = 1440 # IP Adresse wird für 1440 Minuten (1 Tag) geblockt | ||
| Zeile 20: | Zeile 22: | ||
== Fail2Ban == | == Fail2Ban == | ||
=== /etc/fail2ban/jail.local === | |||
<pre> | |||
sudo vi /etc/fail2ban/jail.local | |||
</pre> | |||
<pre> | |||
[oscam-tcp] | |||
enabled = true | |||
filter = oscam | |||
port = xxx (Port aus Oscam Config) | |||
logpath = /var/emu/oscam/oscam.log | |||
protocol = tcp | |||
</pre> | |||
=== /etc/fail2ban/filter.d/oscam.conf === | |||
<pre> | |||
sudo vi /etc/fail2ban/filter.d/oscam.conf | |||
</pre> | |||
<pre> | |||
[Definition] | |||
failregex = (.)*(plain|encrypted) (.)*-client rejected \(invalid access\)$ | |||
ignoreregex = | |||
</pre> | |||
=== Links === | === Links === | ||
[https://www.digital-eliteboard.com/threads/oscam-fail2ban-nicht-internes-failban.483625/ https://www.digital-eliteboard.com/threads/oscam-fail2ban-nicht-internes-failban.483625/] | [https://www.digital-eliteboard.com/threads/oscam-fail2ban-nicht-internes-failban.483625/ https://www.digital-eliteboard.com/threads/oscam-fail2ban-nicht-internes-failban.483625/] | ||
[https://geosharing.info/threads/fail2ban-for-oscam-not-the-build-in-one.380/ https://geosharing.info/threads/fail2ban-for-oscam-not-the-build-in-one.380/] | |||
Zurück zu [[OSCam-Konfiguration_(Cardsharing)#Absichern|OSCam-Konfiguration]], [[Fail2Ban_(Linux)#Programmkonfigurationen|Fail2Ban]] | Zurück zu [[OSCam-Konfiguration_(Cardsharing)#Absichern|OSCam-Konfiguration]], [[Fail2Ban_(Linux)#Programmkonfigurationen|Fail2Ban]] | ||
Aktuelle Version vom 12. Oktober 2022, 08:11 Uhr
Noch in Bearbeitung
FailBan (Bestandteil von OSCam)
sudo vi /usr/local/etc/oscam.conf
# failban failbancount = 0 # Anzahl der erlaubten Fehlversuche mit falschen Zugangsdaten. failbantime = 1440 # IP Adresse wird für 1440 Minuten (1 Tag) geblockt
Links
https://wiki.streamboard.tv/wiki/OSCam/de/Config/oscam.user#failban
https://wiki.streamboard.tv/wiki/OSCam/de/Config/oscam.conf#failbancount
Fail2Ban
/etc/fail2ban/jail.local
sudo vi /etc/fail2ban/jail.local
[oscam-tcp] enabled = true filter = oscam port = xxx (Port aus Oscam Config) logpath = /var/emu/oscam/oscam.log protocol = tcp
/etc/fail2ban/filter.d/oscam.conf
sudo vi /etc/fail2ban/filter.d/oscam.conf
[Definition] failregex = (.)*(plain|encrypted) (.)*-client rejected \(invalid access\)$ ignoreregex =
Links
https://www.digital-eliteboard.com/threads/oscam-fail2ban-nicht-internes-failban.483625/
https://geosharing.info/threads/fail2ban-for-oscam-not-the-build-in-one.380/
Zurück zu OSCam-Konfiguration, Fail2Ban