#7030 (Use Ansible to manage a blacklist of IP addresses)

by Luc Saffre · in Developers · assigned to Luc Saffre

3 weeks ago by Luc Saffre about #7030 (Use Ansible to manage a blacklist of IP addresses) : There was a new traceback from stewards in my inbox, and I added the offending IP 45.134.225.16 to the deploy_nftables.yml blacklist in ourdata and ran it.
3 weeks ago by Luc Saffre about #7030 (Use Ansible to manage a blacklist of IP addresses) : While I am there, Ansible might be useful to manage the mail server configs on our servers.
3 weeks, 2 days ago by Luc Saffre about #7030 (Use Ansible to manage a blacklist of IP addresses) : I started thinking that we should also install fail2ban on all our servers. todo: how to avoid getting banned myself? How do the two approaches interact? How to deploy it to our servers using Ansible?
I read two introductions:
linuxcapable.com/how-to-install-fail2ban-on-debian-linux/ www.kernelhos...
3 weeks, 2 days ago by Luc Saffre about #7030 (Use Ansible to manage a blacklist of IP addresses) : I got started with Ansible. See the README file in ourdata. I defined the deploy_nftables.yml as instructed by Geminy, and (after much verifying) ran it. Seems that it did the job. The rest of this comment is my terminal output:
(dev) luc@ding:~/work/ourdata/ansible$ ansible-playbook deploy_nftables...
3 weeks, 3 days ago by Luc Saffre about #7030 (Use Ansible to manage a blacklist of IP addresses) : Created new Ticket #7030 (Use Ansible to manage a blacklist of IP addresses).