I'm looking for a way to use fail2ban to control/block samba logins on Ubuntu 12.04.3 LTS.
I already set up an
jail.local. The samba part currently looks like this:
enabled = true
port = 135,139,445,137,138
protocol = tcp,udp
I'm missing these two options:
I know that samba log are located in
/var/log/samba, but every hostname has its own file, so what do I have to set as logpath and as filter? Or is this even possible?
Thank you very much