🥊 DDOS attack ?!

Frederic_Renault · 9 August 2025 00:24

J’ai demandé à “Claude” de concocter une configuration fal2ban “rate limiter”, sans couper le protocole “WS2P”… faut adapter la whitelist et la conf de détection puis voir si ça passe le test

github.com/papiche/Astroport.ONE

_DOCKER/duniter1.8.7/README_fail2ban.md

master

# Fail2ban Configuration for Duniter Docker Container

This directory contains a complete fail2ban configuration to protect your Duniter Docker container from abuse and DDoS attacks.

## Configuration Overview

The configuration is designed to:
- **Ban IPs** that make more than **2 requests per 15 minutes**
- **Ban duration**: 24 hours (86400 seconds)
- **Monitor all Duniter ports**: 10901 (BMA), 20901 (WS2P), 30901 (GVA), 9220 (Debug)
- **Whitelist G1 blockchain peers** to prevent legitimate peers from being banned
- **Detect DDOS attacks** based on actual Duniter logs
- **Ignore Docker internal networks** (172.20.0.0/16, 172.17.0.0/16)

## Files Description

### `fail2ban.conf`
Main fail2ban configuration file that defines:
- Default ban settings (24 hours ban, 15 minutes window, 2 max retries)
- Individual jails for each Duniter service port

Ce fichier a été tronqué. afficher l'original