1

So I just got Zyxel nas326 and I looked from internet how to protect nas from bruteforce attack and I found that fail2ban can protect my nas.

Then I found that I can't download any programs to nas326. So now I ask how I can Install fail2ban to Zyxel nas326.

I know in theory I can use wget to download it from my own ftp server and run it, because that nas have python by default, but command pip doesn't work" (python work). Commands like sudo and apt- dont work

Anyone have done this before? Any other suggestions for bruteforce protection?

0xC0000022L
  • 10,908
  • 9
  • 41
  • 79
UDC
  • 31
  • 2

1 Answers1

2

You can still install things manually if you don't have package management tools available.

You have ssh access, so you could simply copy the fail2ban files and configuration via scp from your machine.

It's also possible that whenever you update the NAS firmware, all your customisation may disappear.

I would suggest that you write a shell script, or an Ansible playbook, or use some other kind of configuration management to reapply your fail2ban config to the system if/when you update the firmware.

Mega Tonnage
  • 796
  • 1
  • 5
  • I hosted my own ftp server and used wget to get the file. Then I extraced the file and run python setup.py install. It started installing, but after while it said "error: could not create '/usr/share/doc': Read-only file system" Then I tried chmod o-rwx foldername . Then It gave error: "chmod: usr/: Read-only file system". :( – UDC Sep 21 '22 at 11:03
  • Yes, you may not be able to use standard install methods. Try placing the files where required manually... you don't really need the docs, so you could ditch those. These instructions may help: https://github.com/fail2ban/fail2ban/wiki/How-to-install-or-upgrade-fail2ban-manually – Mega Tonnage Sep 21 '22 at 13:56