Using fail2ban with CoreOS

[Andrew Dunham]

Hi there,

I'm running a CoreOS droplet on DigitalOcean, and I'm seeing a large number of brute-force SSH attacks.  I'm using SSH key-based auth, so it's not a huge concern, but I'd like to install something like fail2ban on the droplet to help with this.  Has anyone had any experience getting this to work?  Alternatively, does anyone know of a way to get fail2ban to run inside a Docker container and still properly manage the host?  I suspect that running with --privileged --net="host" might help, but my initial experimenting hasn't got anything working.

Any additional thoughts are appreciated :-)

Thanks,
--Andrew D

[Justin Tulloss]

I also would like some way of doing this. There's an attempt here: https://github.com/ianblenke/docker-fail2ban/commits/master, but it appears that the author never got it working.

[Chao Zhong]

yes I'm consider of this problem too, also I want to check some output from docker to see if some one attack/abuse the app in the docker, and then ban them, don't know how CoreOS solved these problem

[Seán C. McCord]

I use and recommend this package:

https://github.com/mischief/coreos-sshguard

--
You received this message because you are subscribed to the Google Groups "CoreOS User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to coreos-user...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Seán C McCord

CyCore Systems, Inc

+1 888 240 0308

[Seán C. McCord]

For processing of application/docker-oriented logs, use log aggregation (such as by logstash) and direct potential problems to a separate service (such as those listed here: https://www.elastic.co/guide/en/logstash/current/output-plugins.html)

[Nick Owens]

amazing, i didn't think anyone would use this :-) i hope it's working well for you.

[Seán C. McCord]

Nick,

I do, indeed, and it works beautifully.  It's a nice, simple, and non-invasive solution.  Thanks a lot!

[Jay Mikhail]

Seems awesome to me as well