ZMNinja - Revision history

Burger at 07:17, 30 October 2025

2025-10-30T07:17:42Z

← Older revision		Revision as of 03:17, 30 October 2025
Line 2:		Line 2:

	This is the community wiki documentation on ZMNinja. Please refer to the official docs for more information. https://zmninja.readthedocs.io		This is the community wiki documentation on ZMNinja. Please refer to the official docs for more information. https://zmninja.readthedocs.io


			==Usage==
			See: https://docs.google.com/document/d/e/2PACX-1vS9z-ANNUbPRMhCWbS-PFJtB_6y6O_vwrZfLE6-TjPo3O0bPQeMUjjeTSXFvILU_w4ZTgU01CM9Hz8p/pub
			Which is from the official docs.

	==Setting up ZMNinja - serverside==		==Setting up ZMNinja - serverside==

2024-10-29T14:19:32Z

Test That it Works

← Older revision		Revision as of 10:19, 29 October 2024
Line 139:		Line 139:
	fail2ban-regex /var/log/zm/web_php.log zoneminder.conf		fail2ban-regex /var/log/zm/web_php.log zoneminder.conf
	fail2ban-client status zoneminder		fail2ban-client status zoneminder
			fail2ban-client unban <ipaddress>
	and		and
	tail -F /var/log/zm/web_php.log		tail -F /var/log/zm/web_php.log

2024-10-29T14:09:03Z

Configure jail.d/zoneminder.conf and filter.d/zoneminder.conf

2024-10-29T14:08:41Z

Configure jail.d/zoneminder.conf and filter.d/zoneminder.conf

2024-10-29T13:59:15Z

Configure jail.d/zoneminder.conf and filter.d/zoneminder.conf

← Older revision		Revision as of 09:59, 29 October 2024
Line 99:		Line 99:
	to block certain ports, or all ports depending... That will not be covered in this guide at the moment.		to block certain ports, or all ports depending... That will not be covered in this guide at the moment.

	In /etc/fail2ban/jail.conf (at the end) (or jail.local to avoid updates overwriting)		In /etc/fail2ban/jail.conf (at the end) (or jail.local/jail.d to avoid updates overwriting)
	[zoneminder]		[zoneminder]
	# Zoneminder HTTP/HTTPS web interface auth		# Zoneminder HTTP/HTTPS web interface auth

2024-10-29T13:58:59Z

Test That it Works

← Older revision		Revision as of 09:58, 29 October 2024
Line 145:		Line 145:
	It should ban after 5 tries with zminja (which does two logins each time you try to save settings). It will block on either a correct user with incorrect pass, or a non existent user with an incorrect pass.		It should ban after 5 tries with zminja (which does two logins each time you try to save settings). It will block on either a correct user with incorrect pass, or a non existent user with an incorrect pass.

	~~Note: You may also want to increase~~ bantime from 10m to something higher (1440m), ~~and~~ set the block action to nftables-allports (since iptables is no longer in debian but fail2ban has fail2update). These are in jail.conf.		====Additional Steps====
			* Increase bantime from 10m to something higher (1440m),
			* set the block action to nftables-allports (since iptables is no longer in debian but fail2ban has fail2update). These are in jail.conf.

	* https://www.the-art-of-web.com/system/fail2ban-howto/		* https://www.the-art-of-web.com/system/fail2ban-howto/

2024-10-25T16:05:13Z

Test That it Works

← Older revision		Revision as of 12:05, 25 October 2024
Line 145:		Line 145:
	It should ban after 5 tries with zminja (which does two logins each time you try to save settings). It will block on either a correct user with incorrect pass, or a non existent user with an incorrect pass.		It should ban after 5 tries with zminja (which does two logins each time you try to save settings). It will block on either a correct user with incorrect pass, or a non existent user with an incorrect pass.

	Note: You may also want to increase bantime from 10m to something higher (1440m), and set the block action to nftables-allports (since iptables is no longer in debian but fail2ban has fail2update. These are in jail.conf.		Note: You may also want to increase bantime from 10m to something higher (1440m), and set the block action to nftables-allports (since iptables is no longer in debian but fail2ban has fail2update). These are in jail.conf.

	* https://www.the-art-of-web.com/system/fail2ban-howto/		* https://www.the-art-of-web.com/system/fail2ban-howto/

2024-10-25T16:04:52Z

Test That it Works

← Older revision		Revision as of 12:04, 25 October 2024
Line 143:		Line 143:
	tail -F /var/log/zm/web_php.log		tail -F /var/log/zm/web_php.log

	It should ban after 5 tries with zminja (which does two logins each time you try to save settings). ~~For more details~~ on ~~fail2ban see:~~		It should ban after 5 tries with zminja (which does two logins each time you try to save settings). It will block on either a correct user with incorrect pass, or a non existent user with an incorrect pass.

	Note: You may also want to increase bantime from 10m to something higher (1440m), and set the block action to nftables-allports (since iptables is no longer in debian but fail2ban has fail2update. These are in jail.conf.		Note: You may also want to increase bantime from 10m to something higher (1440m), and set the block action to nftables-allports (since iptables is no longer in debian but fail2ban has fail2update. These are in jail.conf.

2024-10-25T16:04:03Z

Test That it Works

← Older revision		Revision as of 12:04, 25 October 2024
Line 145:		Line 145:
	It should ban after 5 tries with zminja (which does two logins each time you try to save settings). For more details on fail2ban see:		It should ban after 5 tries with zminja (which does two logins each time you try to save settings). For more details on fail2ban see:

	Note: You may also want to increase bantime from 10m to something higher (1440m), and set the block action to nftables-allports (since iptables is no longer in debian but fail2ban has fail2update.		Note: You may also want to increase bantime from 10m to something higher (1440m), and set the block action to nftables-allports (since iptables is no longer in debian but fail2ban has fail2update. These are in jail.conf.

	* https://www.the-art-of-web.com/system/fail2ban-howto/		* https://www.the-art-of-web.com/system/fail2ban-howto/

2024-10-25T16:03:49Z

Test That it Works

← Older revision		Revision as of 12:03, 25 October 2024
Line 145:		Line 145:
	It should ban after 5 tries with zminja (which does two logins each time you try to save settings). For more details on fail2ban see:		It should ban after 5 tries with zminja (which does two logins each time you try to save settings). For more details on fail2ban see:

	~~https~~:~~//www.~~the-~~art-of-web~~.~~com/system/fail2ban-howto/~~		Note: You may also want to increase bantime from 10m to something higher (1440m), and set the block action to nftables-allports (since iptables is no longer in debian but fail2ban has fail2update.

	https://fail2ban.readthedocs.io/en/latest/filters.html		* https://www.the-art-of-web.com/system/fail2ban-howto/
			* https://fail2ban.readthedocs.io/en/latest/filters.html

	==Troubleshooting==		==Troubleshooting==