Skip to content

Commit

Permalink
Update honeypot.md (#102)
Browse files Browse the repository at this point in the history
fail2ban Setup the Jail typo
  • Loading branch information
M1cr00 authored Sep 18, 2023
1 parent de8ede1 commit f247c50
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions docs/honeypot.md
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ From this regex, we retrieve the host if the response matches code 418 which is
### Setup the Jail

Then we need to create the jail in:
`/etc/fail2/ban/jail.d/honeypot.conf`
`/etc/fail2ban/jail.d/honeypot.conf`

If you are using apache then the following will work:
```ini
Expand All @@ -59,4 +59,4 @@ maxretry = 1
`maxretry` is set to 1 because we do not need to second guess those errors.
Fail2ban is also used to ban ssh attempts after multiple failures, in such case a higher number of retry is need.
As we interact with a honeypot, any behaviour touching it is therefore malicious, there are no false positive in our case
and we do not give the benefit of the doubt.
and we do not give the benefit of the doubt.

0 comments on commit f247c50

Please sign in to comment.