sudo yum install epel-release sudo yum install fail2ban
編輯設定
sudo nano /etc/fail2ban/jail.local
[sshd] enabled = true filter = sshd port = 22 action = %(action_mwl)s logpath = /var/log/secure banaction = firewallcmd-ipset
啟動及查看狀態
sudo systemctl start fail2ban sudo systemctl enable fail2ban
sudo fail2ban-client status sudo fail2ban-client status sshd
可參考
Fail2ban可以防止惡意的一些try attach，當try太多次時，會主動阻檔
記得要先yum upgrade , yum update
1.先增加EPLE (Extra Packages for Enterprise Linux)
sudo yum install epel-release
2.安裝fail2ban
sudo yum install fail2ban
3.設定啟動時開啟fail2ban (fail2ban start on boot)
sudo systemctl enable fail2ban
4.啟動fail2ban
sudo systemctl start fail2ban
就完成安裝了，再來需要做一些預設值的設定
sudo nano /etc/fail2ban/jail.local
參考內容是Using Fail2ban with Tomcat
不過內容有些不太一樣，像是log的path，而且好像ban不會成功。
1.在/etc/fail2ban/jail.local增加一個jail 內容
[tomcat] enabled = true port = 8080,8443 filter = tomcat logpath = /usr/share/tomcat/logs/localhost_access_log.*.txt maxretry = 3 bantime = 600 action = firewallcmd-ipset[name=TOMCAT_PORT, port=8080, protocol=tcp] #findtime = 600 # uncomment the next line to use a custom action #action = echo-to-file
centos 7預設使用的firewall是firewallcmd，而不是iptables
