trx
Published on 2024-08-12 / 38 Visits
0

fail2ban配置sshd策略

git clone https://github.com/fail2ban/fail2ban.git
cd fail2ban
sudo python3 setup.py install 
cp files/redhat-initd /etc/rc.d/init.d/fail2ba
sed -i 's#\/usr\/bin\/fail2ban-client#\/usr\/local\/bin\/fail2ban-client#' /etc/rc.d/init.d/fail2ban
systemctl daemon-reload
cat /etc/fail2ban/jail.local


[DEFAULT]
ignoreip = 127.0.0.1 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
bantime  = 36000
findtime = 1800
maxretry = 5
banaction = firewallcmd-ipset
[sshd]
enabled = true
filter  = sshd
port = 22
logpath = /var/log/secure
maxretry = 5
bantime = 18000
findtime = 1800