Show HN: URL Canary – Get an alert when someone finds your secrets

Re:Show HN: URL Canary – Get an alert when someone finds you... by boardwaalk on Monday March 19, 2018 @06:34PM (#16623927)

fail2ban[1] can be set up to do this trivially.

[1] https://www.fail2ban.org/

[ Parent | on HN ]

Re:Show HN: URL Canary – Get an alert when someone finds you... by hughes on Monday March 19, 2018 @07:13PM (#16624269)

ok I'm like 8 pages into the configuration wiki and still have no idea how to set this up

[ Parent | on HN ]

Re:Show HN: URL Canary – Get an alert when someone finds you... by boardwaalk on Monday March 19, 2018 @10:13PM (#16625445)

I'd recommend just installing it and turning on a couple of the built-in filters by editing /etc/fail2ban/jail.local to see how it goes together. See the comment at the top of /etc/jail.conf as well and check out 'man jail.conf'.

Essentially to do the same thing as URL Canary you'd set up an action that only emails and trigger that with a custom filter that scans your web server's access log for accesses to a particular URL.

[ Parent | on HN ]