Centralize or Distribute IPset Blacklists: vallumd
Centralize or Distribute IPset Blacklists If you maintain a server on the Internet, it’s very likely you encountered one or more brute force attacks. Not a problem, just install fail2ban. Done. But if you’re running multiple servers, each of them running their fail2ban instance, they’ll all have different IP addresses in the ban list. Wouldn’t it be nice to have a shared ban list across all your fail2ban instances? Or in case all your machines are behind a router or firewall you control yourself, wouldn’t it be nice to drop malicious traffic at the edge of your network? That’s exactly what vallumd helps to achieve. The name vallumd comes from the Latin word “vallum”, which means wall. And that’s what vallumd does: build a wall to protect your digital empire. How it works Vallumd connects to an MQTT broker, reads messages containing IP addresses, and adds or deletes those IP addresses to or from an ipset. Simple as that. This m...