Features

Current features

Here is a list of the main features available in Fail2ban.

• Highly configurable.
• Parses log files and looks for given patterns.
• Executes a command when a pattern has be detected for the same IP address for more than X times. X can be changed.
• After a given amount of time, executes another command in order to unban the IP address.
• Uses Netfilter/Iptables by default but can also use TCP Wrapper (/etc/hosts.deny) or others firewalls.
• Handles log files rotation.
• Can handle more than one service (sshd, apache, vsftpd, etc).
• Resolves DNS hostname to IP address.
• Can send e-mail notifications.
• Runs as a daemon.
• Multiple logging targets (syslog daemon, stdout, stderr, files).

Roadmap

Here is the planned roadmap. If you want to contribute and help on one of these features, please contact the author.

0.7.0

• Improve website
  Error creating thumbnail: Unable to save thumbnail to destination
• Migrate from CVS to Subversion
• Client/server architecture
  Error creating thumbnail: Unable to save thumbnail to destination
• Multithreading
  Error creating thumbnail: Unable to save thumbnail to destination
• Better configuration files

0.7.1

• Documentation
• Add missing features of 0.6.x
  • Mail notification
  • Check command
• Improve socket communication
• Autodetect date format
• Add support for wildcard in logfile

0.7.2

• Documentation
• Add FAM/Gamin support
• Improve test framework

0.8.0

• Migration tool from 0.6.x to 0.8.0
• Documentation
• Howtos