fail2ban

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

sudo emisar pack install fail2ban --hash sha256:a79690d64c6c197edba8e50e243d728c33554ec3d5188b0d3bfa39ea2097f878

• f2b.banip exec high

  fail2ban-client set <jail> banip <ip>

  Add an IP to a jail's banlist manually. Use during an active attack when log-based detection is too slow. Banned IPs hit the configured action (typically iptables DROP).

  View source on GitHub
• f2b.banned_ips exec low

  get <jail> banip

  List currently banned IPs in one jail.

  View source on GitHub
• f2b.jail_status exec low

  fail2ban-client status <jail>

  Show one jail's filter + actions + currently banned counts.

  View source on GitHub
• f2b.log_tail exec low

  tail /var/log/fail2ban.log

  Tail the last N lines of fail2ban.log.

  View source on GitHub
• f2b.reload exec medium

  fail2ban-client reload [jail]

  Reload fail2ban config. Without a jail, reloads everything. With a jail, reloads that jail only (its filter, action, and settings). Existing bans are preserved.

  View source on GitHub
• f2b.status exec low

  fail2ban-client status

  List all configured jails + currently-active count.

  View source on GitHub
• f2b.unban_ip exec medium

  set <jail> unbanip <ip>

  Remove one IP's ban from one jail. Counter is reset; IP may be banned again on next failure.

  View source on GitHub
• f2b.version exec low

  fail2ban-client version

  Show the fail2ban daemon version.

  View source on GitHub