Manage Brute Force Protection via Command Line

For more control over Brute Force Protection, administrative users can use the command line to configure the service and remove bans manually.

Description Command

Notes

Display Brute Force Protection configuration

ogcli get services/brute_force_protection

 

Update Brute Force Protection configuration

ogcli replace services/brute_force_protection << END
ban_time=180
find_time=1
https_enabled=false
max_retry=4
ssh_enabled=true
END

Ban time in seconds.

Find time in minutes.

Un-ban an IP address

fail2ban-client unban <ipaddress>

 

Un-ban all current bans

fail2ban-client unban --all

 

List SSH bans

fail2ban-client status sshd

SSH protection must be enabled.

List HTTPs bans

fail2ban-client status https

HTTPs protection must be enabled.

List all bans with ogcli

ogcli get monitor/brute_force_protection/bans