fail2ban implementation for JIRA

Can anyone share your action and filter files for implementing fail2ban on JIRA.

I was trying to configure fail2ban on our system and looking for best methods for implementing it effectively.

Any help is highly appreciated.........

3 answers

This widget could not be displayed.

Not sure if I'm missing something, but google took me to this:

https://confluence.atlassian.com/display/JIRA/Using+Fail2Ban+to+limit+login+attempts

Some more info from the comments on that page: http://justinit.wordpress.com/2011/04/12/setup-fail2ban-for-jira-and-confluence/

This widget could not be displayed.

Thanks for replying but there regular expressions will trigger only for almost every login page count
failregex = <HOST>.*"GET /login.jsp

but we need these alerts to be triggered based on incorrect counts and not on login page count.

For example if you use above failregex then count will be increased as soon as you open a new tab and enter JIRA login URL.

I had gone through Justin link as well and also added my question(comment) yesterday itself.

So I needed something which has better implementation of filters to encounter all intruders.

This widget could not be displayed.

The confluence documentation (https://confluence.atlassian.com/adminjiraserver073/using-fail2ban-to-limit-login-attempts-861253903.html) is half-baked and might lock you out with successful login attempts. Also  the GET definition seems wrong.


The jail definition in filter.d will work with this (checked on v7.6.2 and Fail2ban 0.9.3)

----------
[Definition]
failregex = <HOST>.*"POST /rest/gadget/1.0/login HTTP/1.1" 200 219
            <HOST>.*"POST /login.jsp HTTP/1.1" 200
ignoreregex=
----------


#1: this is using the fact that the message size is 220 when it succeeds and 219 when it fails
#2: this is using the fact that a sucessful login will return 302 (redirect) while it returns 200 if the login fails

 

YMMV

Suggest an answer

Log in or Sign up to answer
Atlassian Summit 2018

Meet the community IRL

Atlassian Summit is an excellent opportunity for in-person support, training, and networking.

Learn more
Community showcase
Posted Wednesday in Teamwork

What teamwork quotes inspire you?

Hey everyone! My name is Natalie and I'm an editor of the Atlassian Blog and I've got a question for you: What's your favorite quote about teamwork?  We've compiled a list here, along with...

141 views 16 7
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you