FoundryVTT fail2ban

Just the fail2ban filter for Foundry Virtual TableTop

Prerequisites:

fail2ban at least version 1.0

Installation:

On Foundry server:

After fail2ban installation do:
cp jail.conf jail.local to prevent future fail2ban updates from changing your configuration.
Add/append below section to jail.local on the fail2ban root dir (replacing ***2replace***) with your data:

[\*\*\*JailName\*\*\*]\
enabled = true\
logpath = /\*\*\*path2log\*\*\*\
port = http,https\
filter = \*\*\*filterFileName\*\*\*\
bantime  = 1h\
\# Uncomment one of the two lines below according to your needs\
#banaction = ssh-iptables[remote-host=\*\*\*user\*\*\*@\*\*\*proxyIP\*\*\*, type=multiport]\
#banaction = ssh-iptables-ipset[remote-host=\*\*\*user\*\*\*@\*\*\*proxyIP***, type=multiport, blocktype=DROP]\

After created user on below first point you need to enable ssh connection with key (without asking password) from root user on fail2ban PC to proxy PC (ssh user@proxyIP):
sudo su
ssh-keygen -t rsa
ssh-copy-id user@proxyIP
Authenticate and you will get a confirmation message that a key has been copied, then try connecting with:
ssh user@proxyIP uname -a
you should get the requested data back\

On the proxy you must:

1. create a user with name as you want (in my case fail2ban), this user must be part of a group like users(100)\
2. give rights to iptables and/or bins like:
   chgrp users /usr/sbin/iptables (and/or ipset)
   chmod u+rxs /usr/sbin/iptables (and/or ipset)
   so user above can call needed commands as root...

Contacts:

For any questions, you can find me on the official FoundryVTT Discord server (if I don't answer, please ping me), or if you are Italian you could join this telegram group: https://t.me/foundryvttitalia