FOP Password

[Squishy]

Any idea why this error is occurring?

What is the security code that I need to type in?

 

[jroper]

The default password is passw0rd

 

[Squishy]

Thanks! That works.

 

[Squishy]

Oops! I put the box on a real world IP and
now the "passw0rd" password isn't working.

Also, I notice that I keep needing to login
to my /var/www/html .htpasswd prompt
quite frequently.

Any suggestions?

 

[wardmundy]

Before it's too late, read this.

 

[Squishy]

Thank you Mr. Mundy. Nice article. Great advice.

Even though there were log entries for banned
IPs in /var/log/fail2ban.log, I wanted to make
sure we were getting maximum protection, so:

find / -name "*jail.conf*"

Nothing showed. Confirm:

ps aux | grep fail2ban-server | grep -v grep

Nothing.

OK, let's upgrade:

cd /root
mkdir fail2ban
cd fail2ban
wget http://pbxinaflash.net/source/fail2ban/fail2ban-update
chmod +x fail2ban-update
./fail2ban-update
service fail2ban restart

Now looking even better.

Love that SIP lockout. Since we allow our phones to
go all over the world, don't want to restrict to a
particular IP range. We use very secure passwords
on the extensions, so a bot will locked out quickly
thanks to fail2ban.

Wondering if http/https is protected by fail2ban
as well? From the log file it appears to be. But
on http://nerdvittles.com/?p=580 it only says:

"FTP, SSH, SIP, and IAX..."

Things we do that weren't mentioned in that article:

Don't use passwords on SSH, only keys. Restrict
SSH logins in hosts.allow to certain IPs

Run ZenMap against the server before putting on
a real world IP. Close all unused ports in iptables.
On ports that are open, try to use https.