fail2ban防止暴力破解

安装fail2ban:

将fail2ban 上传到服务器，解压：

[root@xuegod1 tmp]# tar -zxvf fail2ban-0.8.14.tar.gz

[root@xuegod1 tmp]# ll
total 240
-rw-r--r-- 1 root root 7551 May 22 2017 book_utf8.sql
drwxrwxr-x 10 root root 4096 Aug 20 2014 fail2ban-0.8.14
-rw-r--r-- 1 root root 228121 May 23 2017 fail2ban-0.8.14.tar.gz
-rw-r--r-- 1 root root 2666 May 22 2017 school.sql
-rw-------. 1 root root 0 May 9 04:48 yum.log
[root@xuegod1 tmp]# cd fail2ban-0.8.14
[root@xuegod1 fail2ban-0.8.14]# vim README.md

[root@xuegod1 fail2ban-0.8.14]# python setup.py install

设置开机启动：

[root@xuegod1 fail2ban-0.8.14]# cp files/redhat-initd /etc/init.d/fail2ban  #重命名为fail2ban
[root@xuegod1 fail2ban-0.8.14]# chkconfig --add fail2ban

编辑配置文件：

[root@xuegod1 fail2ban-0.8.14]# vim /etc/fail2ban/jail.conf

保存配置，重启服务，开启防火墙

[root@xuegod1 ~]# /etc/init.d/fail2ban start

[root@xuegod1 ~]# service iptables start

从另一台服务器登录超过3次：

[root@xuegod2 ~]# ssh 192.168.10.31

root@192.168.10.31's password:
Permission denied, please try again.
root@192.168.10.31's password:
Permission denied, please try again.
root@192.168.10.31's password:
Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
[root@xuegod2 ~]#
[root@xuegod2 ~]#
[root@xuegod2 ~]# ssh 192.168.10.31
ssh: connect to host 192.168.10.31 port 22: Connection refused
[root@xuegod2 ~]# ssh 192.168.10.31
ssh: connect to host 192.168.10.31 port 22: Connection refused
[root@xuegod2 ~]# ssh 192.168.10.31
ssh: connect to host 192.168.10.31 port 22: Connection refused

查看状态：

[root@xuegod1 fail2ban-0.8.14]# fail2ban-client status ssh-iptables
Status for the jail: ssh-iptables
|- filter
| |- File list: /var/log/secure
| |- Currently failed: 0
| `- Total failed: 3
`- action
|- Currently banned: 1
| `- IP list: 192.168.10.32
`- Total banned: 1