Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Hello and happy new year,

I am wondering if I can use fail2ban on a virtual host that uses bridge-util. I am using LXC containers for virtualization and have therefore direct access to all the log files from the host environment. It would be great if I could install fail2ban just on the host and secure all the virtual boxes at once.

I am just not sure how well fail2ban works with bridge-util, or if there is anything I have to consider with this approach.

Thanks, and lets hope for a better year (2012)

share|improve this question

Happy new year :)

fail2ban can work with custom commands. You need:

cd /etc/fail2ban

cp jail.conf jail.local

In jail.local:

enabled = true

Create action.d/bridge-utils.local:

# executed once at the start of fail2ban
actionstart = brctl ...
# executed once at the end of fail2ban
actionstop = brctl ...
# executed once before each actionban command
actioncheck = ...
# ban action
actionban = brctl ...
            brctl ...
# unban action
actionunban = brctl ...
              brctl ...

# some default variables here

Restart fail2ban and test if it's working right.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.