Knowledgebase

The extension will uninstall fail2ban as the login failure daemon included in Juggernaut Firewall duplicates this functionality (and it does a much better job).

Login Failure Daemon Features
- Daemon process that checks for login failures against SSH, FTP, SMTP AUTH, POP3, IMAP, BIND denied, Plesk, htpasswd, Apache 404 and 403 errors, webmail, and modsecurity 403 denied messages.
- Add your own custom regular expression matching.
- Add your own custom logs file to monitor (supports wildcard patterns).
- Supports both complete blocking or just blocking to the failed application.
- Easily adjust login failures limits per hour for each service before blocking.
- Making blocks permanent or temporary for each service.
- Get an optional email alert when trigger is blocked (includes detailed location information about the offending IP address and reason it was blocked).
- Supports defining what ports you have services running on.
- Convert a temporary block to permanent if the IP address has repeated temporary blocks.
- Block entire netblocks after repeated login failures from the same subnet.
- Ignore specific IP addresses or CIDRs from being blocked from the login failure daemon.
- Ignore specific countries from being blocked from the login failure daemon.
- Supports automatic X-ARF network abuse reporting.