CentOS 7\u5b89\u88ddfail2ban<\/p>\n
<\/p>\n
1.yum<\/p>\n
yum -y install fail2ban<\/p>\n
2.setup<\/p>\n
vi \/etc\/fail2ban\/jail.conf<\/p>\n
[ssh-iptables]
\nenabled = true
\nfilter = sshd
\naction = iptables[name=SSH, port=ssh, protocol=tcp]
\nlogpath = \/var\/log\/secure
\nmaxretry = 3
\nbantime = 86400<\/p>\n
[vsftpd-iptables]
\nenabled = true
\nfilter = vsftpd
\naction = iptables[name=VSFTPD, port=ftp, protocol=tcp]
\nlogpath = \/var\/log\/secure
\nmaxretry = 3
\nbantime = 86400<\/p>\n
[dovecot]
\nenabled = true
\nfilter = dovecot
\naction = iptables-multiport[name=dovecot, port=”pop3,pop3s,imap,imaps,smtp,smtps,submission,sieve”, protocol=tcp]
\nlogpath = \/var\/log\/secure
\nmaxretry = 5
\nbantime = 36000 #\u55ae\u4f4d\u70ba\u79d2,\u9019\u908a\u662f10\u5c0f\u6642<\/p>\n
[dovecot-auth]
\nenabled = true
\nfilter = dovecot
\naction = iptables-multiport[name=dovecot-auth, port=”pop3,pop3s,imap,imaps,submission,465,sieve”, protocol=tcp]
\nlogpath = \/var\/log\/secure
\nmaxretry = 5
\nbantime = 36000 #\u55ae\u4f4d\u70ba\u79d2,\u9019\u908a\u662f10\u5c0f\u6642<\/p>\n
[named-refused-udp]
\nenabled = true
\nfilter = named-refused
\naction = iptables-multiport[name=Named, port=”domain,953″, protocol=udp]
\nlogpath = \/var\/log\/named\/named_security.log
\nbantime = 30000000<\/p>\n
[named-refused-tcp]
\nenabled = true
\nfilter = named-refused
\naction = iptables-multiport[name=Named, port=”domain,953″, protocol=tcp]
\nlogpath = \/var\/log\/named\/named_security.log
\nbantime = 30000000<\/p>\n
fail2ban-client status \u67e5\u770b\u5168\u90e8\u6709\u5e7e\u7d44\u8a2d\u5b9a\u6a94
\nfail2ban-client status dovecot \u67e5\u770bdovecot\u898f\u5247\u7684\u72c0\u614b
\n\u67e5\u770b\u76ee\u524d\u9632\u706b\u7246\u963b\u64cb\u7684\u60c5\u6cc1
\niptables -L -n
\niptables -S<\/p>\n
\u8aa4\u5224\u6e05\u9664\u8207\u958b\u653e:
\n\u82e5\u662f\u67d0\u4e9b\u539f\u56e0\u9020\u6210\u8aa4\u9396,\u53ef\u7528iptables\u6253\u958b\u5b83<\/p>\n
\u5148\u67e5\u770b\u898f\u5247\u93c8 iptables -n -L
\nChain f2b-dovecot (1 references)
\ntarget prot opt source destination
\nREJECT all — 123.456.789.123 0.0.0.0\/0 reject-with icmp-port-unreachable
\nRETURN all — 0.0.0.0\/0 0.0.0.0\/0<\/p>\n
iptables -D f2b-dovecot -s 123.456.789.123 -j REJECT
\n\u9019\u6a23\u5c31\u79fb\u6389\u4e86<\/p>\n","protected":false},"excerpt":{"rendered":"
CentOS 7\u5b89\u88ddfail2ban<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-48","post","type-post","status-publish","format-standard","hentry","category-centos"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/twmis.com\/index.php?rest_route=\/wp\/v2\/posts\/48","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/twmis.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/twmis.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/twmis.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/twmis.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=48"}],"version-history":[{"count":0,"href":"https:\/\/twmis.com\/index.php?rest_route=\/wp\/v2\/posts\/48\/revisions"}],"wp:attachment":[{"href":"https:\/\/twmis.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=48"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/twmis.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=48"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/twmis.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=48"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}