linux:fail2ban

差别

这里会显示出您选择的修订版和当前版本之间的差别。

到此差别页面的链接

--- linux:fail2ban [2016/03/05 22:06] – 创建 memory
+++ linux:fail2ban [2023/12/03 10:24] (当前版本) – 外部编辑 127.0.0.1
@@ 行 29: / 行 29: @@
 sudo yum install python-inotify         // centos
-sudo apt-get install python-inotifyx     // ubuntu/debian
+sudo apt-get install python-pyinotify     // ubuntu/debian
 </code>
@@ 行 58: / 行 58: @@
 # Ban hosts for one hour:
 bantime = 3600
-# Override /etc/fail2ban/jail.d/00-firewalld.conf:
-# 注意centos7需要改用iptables!
-banaction = iptables-multiport
 usedns = no
@@ 行 76: / 行 71: @@
 sudo fail2ban-client status
 sudo fail2ban-client status ssh
+</code>
+===== Usage =====
+==== Check fail2ban status ====
+  fail2ban-client status
+  fail2ban-client status [jail-name]
+==== Unban ip ====
+  fail2ban-client set [jail-name] unbanip [ip]
+==== Test filter rule ====
+  fail2ban-regex 'string' /etc/fail2ban/filter.d/rule.conf
+  fail2ban-regex /path/to/access.log /etc/fail2ban/filter.d/rule.conf
+===== Ban ip by specified nginx rule =====
+新增规则限制 ''nginx'' 某个接口访问（例如短信），避免被恶意使用
+<code ini>
+[nginx-sms]
+enabled = true
+port = http,https
+filter = nginx-sms
+logpath = /path/to/access.log
+maxtry = 9
+findtime = 86400
+bantime  = 21600
+</code>
+<code init /etc/fail2ban/filter.d/nginx-sms.conf>
+[Definition]
+failregex = ^<HOST> - - .* \"POST /path/to HTTP/1.1\" .*$
+ignoreregex =
 </code>

linux/fail2ban.1457186805.txt.gz · 最后更改: 2023/12/03 10:24 (外部编辑)