Fail2ban DYNU
reddit / selfhosted

----------------------------------------------------------------------
Commercial-Low8434 · 2023-10-03 10:25

Hi

​

Has anyone set up fail2ban on Unraid with DYNU instead of Cloudflare?

----------------------------------------------------------------------
zfa · 2023-10-04 01:25

I don't see how or why you'd integrate fail2ban and dynu.

Dynu just gives you a hostname for your dynamic IP - what do you want
to do, remove the dyndns entry if you start getting failed access
attempts? What services will you monitor? I guess if you were going to
check the hostname being used in the connection attempts you could
then drop the dyndns name?

But why not just block using normal iptables etc, removing the dyndns
hostname itself would affect all people trying to resolve it
(including yourself) as there's no way to drop DNS resn for a single
bad actor.

Maybe if you explain what you want to accomplish you'd get some better
advice.

----------------------------------------------------------------------
Commercial-Low8434 · 2023-10-04 07:32

Hi

So I want to host the following Services at a minimum, I do already
have NPM running for SSL

Nextcloud

Heimdall/Homarr

Home Assistant

Searxng

In the future an adguard DNS for me to use when I'm out an about
instead of wireguarding

​

This type of thing is a little more advanced then I'm used to
(hobbyist) it was my understanding that fail2ban was the right choice.


I have actually been playing with banIP on my OpenWRT (Wulf snapshot)
Pi, whilst up and running it doesn't seem to be catching anything at
all so I'm going to spend today trying to understand the correct
setup.

----------------------------------------------------------------------
zfa · 2023-10-04 20:13

OK, so none of that needs you to integrate fail2ban with dynu.

Just search for fail2ban and whatever service to follow whatever
relevant guides. It'll work just fine with you using dynu for dyndns.