This article, we will take a look on how to exempt from banning visitors from a specific country using Fail2ban and geoip.
\nIt is assumed that Fail2ban is already installed and configured in your server.
\nLets install first the geoip:<\/p>\n
yum install geoip<\/p>\n
Create Fail2ban action script:<\/p>\n
vi \/etc\/fail2ban\/action.d\/geohostsdeny.conf<\/p>\n
Copy the following script:<\/p>\n
[Definition]<\/p>\n
# Option:\u00a0 actionstart
\n# Notes.:\u00a0 command executed once at the start of Fail2Ban.
\n# Values:\u00a0 CMD
\n#
\nactionstart =<\/p>\n
# Option:\u00a0 actionstop
\n# Notes.:\u00a0 command executed once at the end of Fail2Ban
\n# Values:\u00a0 CMD
\n#
\nactionstop =<\/p>\n
# Option:\u00a0 actioncheck
\n# Notes.:\u00a0 command executed once before each actionban command
\n# Values:\u00a0 CMD
\n#
\nactioncheck =<\/p>\n
# Option:\u00a0 actionban
\n# Notes.:\u00a0 command executed when banning an IP. Take care that the
\n#\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 command is executed with Fail2Ban user rights.
\n#\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Excludes PH|Philippines from banning.
\n# Tags:\u00a0\u00a0\u00a0 See jail.conf(5) man page
\n# Values:\u00a0 CMD
\n#
\nactionban = IP=<ip> &&
\nCOUNTRY=$(geoiplookup $IP | egrep “<country_list>”) && [ “$COUNTRY” ] ||
\n(printf %%b “<daemon_list>: $IP\\n” >> <file><\/p>\n
# Option:\u00a0 actionunban
\n# Notes.:\u00a0 command executed when unbanning an IP. Take care that the
\n#\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 command is executed with Fail2Ban user rights.
\n# Tags:\u00a0\u00a0\u00a0 See jail.conf(5) man page
\n# Values:\u00a0 CMD
\n#
\nactionunban = IP=<ip> && sed -i.old \/ALL:\\ $IP\/d <file><\/p>\n
[Init]<\/p>\n
# Option:\u00a0 country_list
\n# Notes.:\u00a0 List of exempted countries separated by pipe “|”
\n# Values:\u00a0 STR\u00a0 Default:
\n#
\ncountry_list = PH|Philippines<\/p>\n
# Option:\u00a0 file
\n# Notes.:\u00a0 hosts.deny file path.
\n# Values:\u00a0 STR\u00a0 Default:\u00a0 \/etc\/hosts.deny
\n#
\nfile = \/etc\/hosts.deny<\/p>\n
# Option:\u00a0 daemon_list
\n# Notes:\u00a0\u00a0 The list of services that this action will deny. See the man page
\n#\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 for hosts.deny\/hosts_access. Default is all services.
\n# Values:\u00a0 STR\u00a0 Default: ALL
\ndaemon_list = ALL<\/p>\n
The script above will exempt from banning the visitors from Philippines which defined in “country_list”.
\nTo enable our action script in Fail2Ban:<\/p>\n
vi \/etc\/fail2ban\/jail.local<\/p>\n
Copy the following line:<\/p>\n
banaction = geohostsdeny<\/p>\n
Restart Fail2Ban:<\/p>\n
systemctl restart fail2ban<\/p>\n","protected":false},"excerpt":{"rendered":"
This article, we will take a look on how to exempt from banning visitors from a specific country using Fail2ban and geoip. It is assumed that Fail2ban is already installed and configured in your server. Lets install first the geoip:<\/p>\n
yum install geoip<\/p>\n
Create Fail2ban action script:<\/p>\n
vi \/etc\/fail2ban\/action.d\/geohostsdeny.conf<\/p>\n
Copy the following script:<\/p>\n
[Definition]<\/p>\n
# […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[73],"tags":[],"_links":{"self":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5951"}],"collection":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5951"}],"version-history":[{"count":1,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5951\/revisions"}],"predecessor-version":[{"id":5952,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5951\/revisions\/5952"}],"wp:attachment":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}