Linux安装Fail2ban过程记录

944人浏览   2024-05-20 15:00:25


fail2ban用来保护ssh的原理也非常简单,主要就是通过检测ssh的日志,记录下频繁登录失败的IP,如网络暴力攻击等,然后使用iptables来直接禁用掉对应的IP请求即可实现ssh的防暴力破解。

一、使用Secure-CRT 或X shell工具,登录远程华为云主机。

二、安装fail2ban。

Centos中可以直接启用epel源来直接进行安装

yum install epel-release

yum install fail2ban

[root@Demo-Environment appuser]# yum install epel-release

Last metadata expiration check: 0:05:11 ago on Thu 30 Dec 2021 09:08:55 AM CST.

Package epel-release-8-10.el8.noarch is already installed.

Dependencies resolved.

====================================================================================================================================================================

Package Architecture Version Repository Size

====================================================================================================================================================================

Upgrading:

epel-release noarch 8-13.el8 epel 23 k

Transaction Summary

====================================================================================================================================================================

Upgrade 1 Package



Complete!

[root@Demo-Environment appuser]# yum install fail2ban

Last metadata expiration check: 0:05:25 ago on Thu 30 Dec 2021 09:08:55 AM CST.

Dependencies resolved.

====================================================================================================================================================================

Package Architecture Version Repository Size

====================================================================================================================================================================

Installing:

fail2ban noarch 0.11.2-1.el8 epel 19 k

Installing dependencies:

fail2ban-firewalld noarch 0.11.2-1.el8 epel 19 k

fail2ban-sendmail noarch 0.11.2-1.el8 epel 22 k

fail2ban-server noarch 0.11.2-1.el8 epel 459 k

python3-systemd x86_64 234-8.el8 AppStream 81 k

Transaction Summary

====================================================================================================================================================================

Install 5 Packages



Installed:

fail2ban-0.11.2-1.el8.noarch fail2ban-firewalld-0.11.2-1.el8.noarch fail2ban-sendmail-0.11.2-1.el8.noarch fail2ban-server-0.11.2-1.el8.noarch

python3-systemd-234-8.el8.x86_64

Complete!

[root@Demo-Environment appuser]#

yum安装fepel-release

yum安装fail2ban

三、fail2ban启停操作

• 停止

systemctl stop fail2ban

• 启动

systemctl start fail2ban

• 重启

systemctl restart fail2ban

• 开机启动

systemctl enable fail2ban

四、配置fail2ban

fail2ban的默认配置目录位于/etc/fail2ban

如忽略的IP列表,不受设置限制等

相关推荐