Fail2ban Odoo 9 Authentication

Posted on by

Odoo 9 community doesn’t come with autoban security. Fail2ban is an alternative to secure Odoo authentication. For more information concerning fail2ban click here

Let’s start with creating a new filter:

vi /etc/fail2ban/filter.d/odoo.conf

Paste the content from bellow code:

[INCLUDES]

# Read common prefixes. If any customizations available -- read them from
# common.local
before = common.conf

[Definition]

failregex = INFO:openerp.addons.base.res.res_users:Login failed for db:.* login:.*\n.*INFO:werkzeug: - - \[.*\] \"POST /web/login .*\" 200 -
         - \[.*\] \"POST /web/database/(drop|duplicate|create) HTTP/2.0\"

ignoreregex =
journalmatch = _SYSTEMD_UNIT=odoo.service + _COMM=odoo

[Init]

maxlines = 2

Add those line in jail.local

[odoo]
enabled = true
port    = 443,80,8069
filter  = odoo
logpath = /var/log/syslog
maxretry = 5
bantime  = -1
findtime = 1h

Change the value of syslog in the /etc/odoo/openerp-server.conf

syslog = True

Restart Odoo then fail2ban to apply modification.

Related Posts

  • Useful Api in OpenERP/Odoo 9 Python

    [code lang="python"] @api.multi def multi_fct(self): i = 0 for record in self: i += record.value return i @api.depends('qty') def multi_fct(self):…

  • Create scheduled actions Odoo 9

    Scheduled actions can be set by adding this code in your xml file. This exemple will call the function schedule_action…

  • SQL query in Odoo

        Sql query in Odoo model [code lang="python"] @api.multi def get_all_so(self, name=None): sql = "select * from sale_order where…

  • Odoo 9 Email Template

    This is a basic email template to put in the xml file: [code lang="xml"] <record id="email_template" model="mail.template"> <field name="name">My Email…

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.