Features

From Fail2ban
Revision as of 18:03, 16 May 2006 by Lostcontrol (Talk | contribs)

Jump to: navigation, search

Current features

Here is a list of the main features available in Fail2ban.

  • Highly configurable.
  • Parses log files and looks for given patterns.
  • Executes a command when a pattern has be detected for the same IP address for more than X times. X can be changed.
  • After a given amount of time, executes another command in order to unban the IP address.
  • Uses Netfilter/Iptables by default but can also use TCP Wrapper (/etc/hosts.deny) or others firewalls.
  • Handles log files rotation.
  • Can handle more than one service (sshd, apache, vsftpd, etc).
  • Resolves DNS hostname to IP address.
  • Can send e-mail notifications.
  • Runs as a daemon.
  • Multiple logging targets (syslog daemon, stdout, stderr, files).

Roadmap

Here is the planned roadmap. If you want to contribute and help on one of these features, please contact the author.

0.7.0

  • Improve website done
  • Migrate from CVS to Subversion
  • Client/server architecture done
  • Multithreading done
  • Better configuration files

0.7.1

  • Documentation
  • Add missing features of 0.6.x
    • Mail notification
    • Check command
  • Improve socket communication
  • Autodetect date format
  • Add support for wildcard in logfile

0.7.2

  • Documentation
  • Add FAM/Gamin support
  • Improve test framework

0.8.0

  • Migration tool from 0.6.x to 0.8.0
  • Documentation
  • Howtos