Security

fail2ban

Write a Review

Description:

This plugin checks your Server for banned IPs by fail2ban.

Current Version

1.0

Last Release Date

2020-03-22

Compatible With

  • Nagios 1.x
  • Nagios 2.x
  • Nagios 3.x
  • Nagios 4.x
  • Nagios XI

Owner

Fabian Ihle

Website

https://github.com/n1tr0-5urf3r/icinga2-scripts

Download URL

https://github.com/n1tr0-5urf3r/icinga2-scripts/blob/master/plugins/check_fail2ban

License

GPL

Copy Page Link Recommend Login to Add to Favorites Login to Claim
Project Notes
### Installation This plugin requires fail2ban and sudo installed. Also several commands must be runnable by nagios user with sudo, so add the following to visudo: # Needed for check_fail2ban nagios ALL=NOPASSWD: /usr/bin/fail2ban-client status nagios ALL=NOPASSWD: /usr/bin/fail2ban-client status * nagios ALL=NOPASSWD: /usr/bin/fail2ban-client get * banip nagios ALL=NOPASSWD: /usr/bin/fail2ban-client get * banip --with-time nagios ALL=NOPASSWD: /usr/bin/fail2ban-client get * bantime ### Usage ./check_fail2ban -h Display this message -w defaults to 10 -c defaults to 20 -t Time: Display until when IPs will be banned -j i.e. comma separated string of jails, i.e. ssh,postfix Only check those jails ###Examples ./check_fail2ban -t -w 5 -c 10 -j ssh,postfix ./check_fail2ban -t
Reviews (2) Add a Review
Works perfectly
by miked, June 30, 2024
Easy to follow instructions, works perfectly.
Exaclty what I needed
Helpful?    
Report
Works locally, but how to check from Nagios Server
by jotta, July 31, 2020
H, thank you for this plugin,. It works great when I run it locally on the machine where Fail2Ban is running. But I cannot get it running remotely from the Nagios Server.

I tried to check it directly with adding "-H " to your command syntax as well as configure a remote NRPE call from Nagios Server to the server where Fail2Ban is running. But the result is still the same: "Error: fail2ban-client not found"

What do I do wrong? Thank you, Jakub
Owner's Reply:

Hi, sorry for the late response!
it is intended to run this command via NRPE from the nagios server. Are you sure that your nrpe command is defined properly? How does it look like?

Helpful?    
Report
Add a Review

You must be logged in to submit a review.

Thank you for your review!

Your review has been submitted and is pending approval.

Recommend

To:


From:


Thank you for your recommendation!

Your recommendation has been sent.

Page Sections
Project Overview Project Notes Reviews
Project Stats
Rating
4.7 (3)
Favorites
1
Views
5,510