When you turn on the Cloudflare proxy for your website, if it is scanned or attacked, fail2ban will block the CDN node IP by default. Now we combine Fail2ban and cloudflare to intercept the attacker’s IP in Cloudflare 1. Set up your Cloudflare API information It should be noted that we have to fill in the global Token Click the Test Connection button , the setting is correct, it will prompt the connection is successful 2. Create website protection If you need to protect multiple URIs, please fill in one per line 3. Test the interception effect We continuously access our protected uri in the browser or terminal. When the number of visits reaches the blocking threshold, the malicious IP will be blocked by Cloudflare.

aaPanel_Jose cloudflare.py doesn't exist i tried reinstall fail2ban. uninstall fail2ban restart panel then install fail2ban. same error

aaPanel_Jose Im so sorry for late reply, should i include everything? thanks `Please do not forget to update your configuration files. They are in "/etc/fail2ban/". You can also install systemd service-unit file from "build/fail2ban.service" resp. corresponding init script from "files/*-initd". {"product": "Linux panel", "setup_path": "/www/server", "openlitespeed_path": "/usr/local", "language": "English", "title": "aaPanel Linux panel", "brand": "aaPanel", "root_path": "/www", "template": "default", "logs_path": "/www/wwwlogs", "home": " https://console.aapanel.com ", "recycle_bin": true} --2021-05-15 06:41:01-- http://128.1.164.196/install/plugin/fail2ban_en/fail2ban_main.py Connecting to 128.1.164.196:80... connected. HTTP request sent, awaiting response... 200 OK Length: 39277 (38K) [application/octet-stream] Saving to: ‘/www/server/panel/plugin/fail2ban/fail2ban_main.py’ 0K .......... .......... .......... ........ 100% 130K=0.3s if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } 2021-05-15 06:41:02 (130 KB/s) - ‘/www/server/panel/plugin/fail2ban/fail2ban_main.py’ saved [39277/39277] --2021-05-15 06:41:02-- http://128.1.164.196/install/plugin/fail2ban_en/index.html Connecting to 128.1.164.196:80... connected. HTTP request sent, awaiting response... 200 OK Length: 57553 (56K) [text/html] Saving to: ‘/www/server/panel/plugin/fail2ban/index.html’ 0K .......... .......... .......... .......... .......... 88% 171K 0s 50K ...... 100% 42.7K=0.4s if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } 2021-05-15 06:41:03 (128 KB/s) - ‘/www/server/panel/plugin/fail2ban/index.html’ saved [57553/57553] --2021-05-15 06:41:03-- http://128.1.164.196/install/plugin/fail2ban_en/info.json Connecting to 128.1.164.196:80... connected. HTTP request sent, awaiting response... 200 OK Length: 333 [application/json] Saving to: ‘/www/server/panel/plugin/fail2ban/info.json’ 0K 100% 44.2M=0s if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } 2021-05-15 06:41:03 (44.2 MB/s) - ‘/www/server/panel/plugin/fail2ban/info.json’ saved [333/333] --2021-05-15 06:41:03-- http://128.1.164.196/install/plugin/fail2ban_en/icon.png Connecting to 128.1.164.196:80... connected. HTTP request sent, awaiting response... 200 OK Length: 4839 (4.7K) [image/png] Saving to: ‘/www/server/panel/plugin/fail2ban/icon.png’ 0K .... 100% 261M=0s if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } 2021-05-15 06:41:03 (261 MB/s) - ‘/www/server/panel/plugin/fail2ban/icon.png’ saved [4839/4839] --2021-05-15 06:41:03-- http://128.1.164.196/install/plugin/fail2ban_en/jail.local Connecting to 128.1.164.196:80... connected. HTTP request sent, awaiting response... 200 OK Length: 491 [application/octet-stream] Saving to: ‘/etc/fail2ban/jail.local’ 0K 100% 47.5M=0s if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } 2021-05-15 06:41:04 (47.5 MB/s) - ‘/etc/fail2ban/jail.local’ saved [491/491] --2021-05-15 06:41:04-- http://128.1.164.196/install/plugin/fail2ban_en/fail2ban.service Connecting to 128.1.164.196:80... connected. HTTP request sent, awaiting response... 200 OK Length: 693 [application/octet-stream] Saving to: ‘/lib/systemd/system/fail2ban.service’ 0K 100% 74.2M=0s if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } 2021-05-15 06:41:04 (74.2 MB/s) - ‘/lib/systemd/system/fail2ban.service’ saved [693/693] *.info;mail.none;authpriv.none;cron.none /var/log/messages`

How to Integrate fail2ban with CloudFlare

hklcf

thanks

aapanel_user

aaPanel_Jose thanks, very useful feature.

swsemnto

aaPanel_Jose
Hi I'm receiving this error. whenever i click the test connection.

Sorry, something went wrong：
Traceback (most recent call last):
File "class/flask_sockets.py", line 30, in __call__
handler, values = adapter.match()
File "/www/server/panel/pyenv/lib/python3.7/site-packages/werkzeug/routing.py", line 1945, in match
raise NotFound()
werkzeug.exceptions.NotFound: 404 Not Found: The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "class/panelPlugin.py", line 1981, in a
return eval(execStr)
File "", line 1, in
File "plugin/fail2ban/fail2ban_main.py", line 490, in test_cdn_auth_info
cdn_module = self.load_cdn_module(values['cdn_provide'])
File "plugin/fail2ban/fail2ban_main.py", line 483, in load_cdn_module
cdn_module = __import__('{}'.format(cdn_provide))
ModuleNotFoundError: No module named 'cloudflare'

aaPanel_Jose

swsemnto
please check if this file exists /www/server/panel/plugin/fail2ban/cdn/cloudflare.py
if exists try to restart the panel
if no exists please try to reinstall fail2ban

swsemnto

aaPanel_Jose
cloudflare.py doesn't exist
i tried

reinstall fail2ban.
uninstall fail2ban restart panel then install fail2ban.
same error

aaPanel_Jose

swsemnto
please show me the installation log
cat /tmp/panelShell.pl

swsemnto

aaPanel_Jose Im so sorry for late reply, should i include everything? thanks

`Please do not forget to update your configuration files.
They are in "/etc/fail2ban/".

You can also install systemd service-unit file from "build/fail2ban.service"
resp. corresponding init script from "files/*-initd".

{"product": "Linux panel", "setup_path": "/www/server", "openlitespeed_path": "/usr/local", "language": "English", "title": "aaPanel Linux panel", "brand": "aaPanel", "root_path": "/www", "template": "default", "logs_path": "/www/wwwlogs", "home": "https://console.aapanel.com", "recycle_bin": true}
--2021-05-15 06:41:01-- http://128.1.164.196/install/plugin/fail2ban_en/fail2ban_main.py
Connecting to 128.1.164.196:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 39277 (38K) [application/octet-stream]
Saving to: ‘/www/server/panel/plugin/fail2ban/fail2ban_main.py’

 0K .......... .......... .......... ........             100%  130K=0.3s

2021-05-15 06:41:02 (130 KB/s) - ‘/www/server/panel/plugin/fail2ban/fail2ban_main.py’ saved [39277/39277]

--2021-05-15 06:41:02-- http://128.1.164.196/install/plugin/fail2ban_en/index.html
Connecting to 128.1.164.196:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 57553 (56K) [text/html]
Saving to: ‘/www/server/panel/plugin/fail2ban/index.html’

 0K .......... .......... .......... .......... .......... 88%  171K 0s
50K ......                                                100% 42.7K=0.4s

2021-05-15 06:41:03 (128 KB/s) - ‘/www/server/panel/plugin/fail2ban/index.html’ saved [57553/57553]

--2021-05-15 06:41:03-- http://128.1.164.196/install/plugin/fail2ban_en/info.json
Connecting to 128.1.164.196:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 333 [application/json]
Saving to: ‘/www/server/panel/plugin/fail2ban/info.json’

 0K                                                       100% 44.2M=0s

2021-05-15 06:41:03 (44.2 MB/s) - ‘/www/server/panel/plugin/fail2ban/info.json’ saved [333/333]

--2021-05-15 06:41:03-- http://128.1.164.196/install/plugin/fail2ban_en/icon.png
Connecting to 128.1.164.196:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4839 (4.7K) [image/png]
Saving to: ‘/www/server/panel/plugin/fail2ban/icon.png’

 0K ....                                                  100%  261M=0s

2021-05-15 06:41:03 (261 MB/s) - ‘/www/server/panel/plugin/fail2ban/icon.png’ saved [4839/4839]

--2021-05-15 06:41:03-- http://128.1.164.196/install/plugin/fail2ban_en/jail.local
Connecting to 128.1.164.196:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 491 [application/octet-stream]
Saving to: ‘/etc/fail2ban/jail.local’

 0K                                                       100% 47.5M=0s

2021-05-15 06:41:04 (47.5 MB/s) - ‘/etc/fail2ban/jail.local’ saved [491/491]

--2021-05-15 06:41:04-- http://128.1.164.196/install/plugin/fail2ban_en/fail2ban.service
Connecting to 128.1.164.196:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 693 [application/octet-stream]
Saving to: ‘/lib/systemd/system/fail2ban.service’

 0K                                                       100% 74.2M=0s

2021-05-15 06:41:04 (74.2 MB/s) - ‘/lib/systemd/system/fail2ban.service’ saved [693/693]

*.info;mail.none;authpriv.none;cron.none /var/log/messages`

angelitoflow

I have the same error

Sorry, something went wrong：
Traceback (most recent call last):
File "class/flask_sockets.py", line 30, in call
handler, values = adapter.match()
File "/www/server/panel/pyenv/lib/python3.7/site-packages/werkzeug/routing.py", line 1945, in match
raise NotFound()
werkzeug.exceptions.NotFound: 404 Not Found: The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "class/panelPlugin.py", line 1981, in a
return eval(execStr)
File "", line 1, in
File "plugin/fail2ban/fail2ban_main.py", line 619, in set_anti
return self.set_scan_anti(values)
File "plugin/fail2ban/fail2ban_main.py", line 431, in set_scan_anti
result = self.active_cdn(values)
File "plugin/fail2ban/fail2ban_main.py", line 517, in active_cdn
return cf.main(values)
File "/www/server/panel/plugin/fail2ban/cdn/cloudflare.py", line 158, in main
self.set_webserver_log(data)
File "/www/server/panel/plugin/fail2ban/cdn/cloudflare.py", line 79, in set_webserver_log
self.set_apache_log()
TypeError: set_apache_log() missing 1 required positional argument: 'data'

aaPanel_Jose

angelitoflow @swsemnto
Please reinstall fail2ban again

Jimmy

aaPanel_Jose

Perfect! Its possible with fail2ban to set some specific whitelisted dirs such as white IP?

angelitoflow

aaPanel_Jose I did but the same problem.

swsemnto

aaPanel_Jose working fine now. Thank you!

Toyota

I have different accounts for different sites : ((It's bad that you can't specify sites and CF accounts.

And if the site does not have CF, then how to enable protection? So that the lock is via NGINX?

Jimmy

Toyota

Same here. In the current version we can only use the Zone ID to specify the domain on the same account.

aaPanel_Jose

angelitoflow
Do you still have problems using it now?

@Jimmy @Toyota
We will add multi-account support in the future

KrzysztofMaciejewski

i have problem with OLS access log file

its almost empty - not record any activity on my websites

in main OLS config file i have:

KrzysztofMaciejewski

i have problem with OLS access log file

its almost empty - not record any activity on my websites

in main OLS config file i have:

aaPanel_Jose

KrzysztofMaciejewski
Please change the website log to the following format in website settings-->conf
logFormat '%{X-Forwarded-For}i %h %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i"'

KrzysztofMaciejewski

aaPanel_Jose
thanks for reply
added in website config and restarted OLS
still empty log file

aaPanel_Jose

KrzysztofMaciejewski
please provide your log file path

KrzysztofMaciejewski

aaPanel_Jose

/www/wwwlogs/websiteadress.pl_ols.access_log