hulkd to iptables

[sehh]

Is it possible to ask hulkd to send blocked IP addresses to iptables?

At the moment, when hulkd bans an offending IP address, it only blocks the IP from loggin in. It would be useful if we could ban the IP entirely from the firewall.

 

[Andrew Boring]

I'd recommend installing Configserver firewall. Its accompanying LFD will watch logs for login failures and add them to iptables automatically.

You can use cpHulkd to lock the user out after 5 attempts, and then configure CSF to firewall off after more than 10+.

 

[sehh]

If hulkd can offer this feature, why install extra software? This is a very simple feature and i don't see why i should install 3rd party software for it.

 

[cPanelDavidG]

cPanel and WHM (including cphulkd) does not interact with iptables at this time. However, you can use Host Access Control as an interface to /etc/hosts.allow and /etc/hosts.deny