Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have Watchguard XTM22-W as my firewall. On it there are few 1-to-1 NAT policies through which I access local services (mainly SSH on different machines). All these machines have Fail2Ban installed and send everything to a central log server. All machines run Ubuntu and use rsyslog.

As I collect all addresses to be banned on one place, I would like to have a script, running on this Linux box, where I will login to the Watchguard and execute couple commands there. This way I will stop the bad traffic at the entry point.

The issue I have with this is how to make passwordless admin login for Watchguard? It doesn't seem to provide functionality for that. Another option will be to tweak it auto-block feature, so it will ban IP addresses who abuse SSH. But then - how would it know how many attempts were made?

Thanks!

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.