Fail2banActionBanisher is a distributed malicious-host banishing system (fail2ban + iptables), with event propagation over MQTT. A "master" server centralizes the decision (multi-node correlation, global recidive detection) and republishes the actions to be executed to all subscribed nodes.

Joining the community doesn't assume any ownership relationship between servers: every member keeps their own node and their own local fail2ban — only ban propagation is shared through this common master. No member gets access to another member's servers.

Your server detects and bans locally (fail2ban + iptables), publishes the event to a local Mosquitto broker, then relays it to this master over mTLS. In return, the master republishes decided bans (propagation, escalation if recidive is detected across several nodes, ...) to your server.

1. Clone the repository on your server (Debian 13 VPS), into a dedicated user's $HOME.
2. Copy .env.example to .env and edit it.
3. Token-based enrollment: once your request below is accepted, you'll receive an email with a ready-to-use make join command — your server's private key is generated locally and never leaves your machine.
4. sudo make install

Your request will be reviewed before an enrollment token is sent to you by email.