快轉到主要內容

Fail2ban

·90 字·1 分鐘·
PolloChang
作者
PolloChang
我是一隻雞

fail2ban 安裝
#

1
apt install fail2ban -y

狀態
#

檢查監控的服務

1
fail2ban-client status

檢查被攔阻的IP
#

1
fail2ban-client status zimbra-smtp

設定完成後檢查
#

1
fail2ban-regex /var/log/zimbra.log /etc/fail2ban/filter.d/zimbra-smtp.conf

加载所有配置
#

1
fail2ban-client reload 

Ban an IP address
#

fail2ban-client set “Jail-Name” banip “IP-Address”

1
fail2ban-client set sshd banip 10.137.26.29  

Unban an IP address.
#

fail2ban-client set “Jail-Name” unbanip “Banned IP-Address”

1
fail2ban-client set sshd unbanip 10.137.26.29