Swag reverse proxy, fail2ban not working
reddit / selfhosted

----------------------------------------------------------------------
FloppyTomatoes · 2023-12-06 23:31

Hi,

I am struggling to get fail2ban working with Swag.

​

I am running ubuntu server 22.04 LTS and have fail2ban running on the
host. This works great, no issues and IPs get banned for the rules I
have in place. I am using UFW and have updated my after.rules for
docker based on the recommendations
[here](https://github.com/chaifeng/ufw-docker).

​

I recently installed swag to use as a reverse proxy with authelia as a
SSO. This is all working good. I am now trying to configure fail2ban
inside Swag to block IPs after x failed authentications. I have my
jail setup and I can see that the IP is banned in the logs, and I see
that the IP is banned in the IP Tables of the Swag container. However
I can still see access the login page with this IP directly
afterwards.

​

Should this IP also get blocked in the host IP tables? Nothing is
showing there. Or is there something I should be doing so that the
container ip table rules are also executed along with the host ip
table rules?

​