You are here

centos 安装fail2ban 防暴力破解

fail2ban可以监视你的系统日志,然后匹配日志的错误信息(正则式匹配)执行相应的屏蔽动作(一般情况下是调用防火墙屏蔽),如:当有人在试探你的SSH、SMTP、FTP密码,只要达到你预设的次数,fail2ban就会调用防火墙屏蔽这个IP,而且可以发送e-mail通知系统管理员,是一款很实用、很强大的软件!

官网:http://www.fail2ban.org/
github:https://github.com/fail2ban/fail2ban

wget "https://nodeload.github.com/fail2ban/fail2ban/zip/master" -O "fail2ban.zip"
unzip fail2ban.zip
cd fail2ban-master
python setup.py install

cd files
cp ./redhat-initd /etc/init.d/fail2ban

参考资料:
http://www.hackbase.com/tech/2012-09-14/66836.html
http://www.centos.bz/2012/04/prevent-ssh-break-in-with-fail2ban/

文章类型: