CentOSϵͳÈçºÎ°ÑIP´ÓFail2banºÚÃûµ¥ÖÐÒƳý

¡¡¡¡LinuxϵͳÖÐFail2banÊÇÒ»¿î±£»¤·þÎñÆ÷ÃâÊÜÍøÂç¹¥»÷µÄ¹¤¾ß£¬Fail2ban¿ÉÒÔͨ¹ýºÚÃûµ¥À´½ûÖ¹IP·ÃÎÊ¡£¼ÈÈ»Óб»½ûÖ¹µÄIP£¬ÄÇôÎÊÌâÀ´ÁË£¬CentOSϵͳÈçºÎ°ÑIP´ÓFail2banºÚÃûµ¥ÖÐÒƳý¡£

¡¡¡¡ÈçºÎÁгö±»½ûÖ¹µÄ IPÒª²é¿´ËùÓб»½ûÖ¹µÄ ip µØÖ·£¬ÔËÐÐÏÂÃæµÄÃüÁ

¡¡¡¡# iptables -L

¡¡¡¡Chain INPUT £¨policy ACCEPT£©

¡¡¡¡target prot opt source destination

¡¡¡¡f2b-AccessForbidden tcp -- anywhere anywhere tcp dpt:http

¡¡¡¡f2b-WPLogin tcp -- anywhere anywhere tcp dpt:http

¡¡¡¡f2b-ConnLimit tcp -- anywhere anywhere tcp dpt:http

¡¡¡¡f2b-ReqLimit tcp -- anywhere anywhere tcp dpt:http

¡¡¡¡f2b-NoAuthFailures tcp -- anywhere anywhere tcp dpt:http

¡¡¡¡f2b-SSH tcp -- anywhere anywhere tcp dpt:ssh

¡¡¡¡f2b-php-url-open tcp -- anywhere anywhere tcp dpt:http

¡¡¡¡f2b-nginx-http-auth tcp -- anywhere anywhere multiport dports http£¬https

¡¡¡¡ACCEPT all -- anywhere anywhere state RELATED£¬ESTABLISHED

¡¡¡¡ACCEPT icmp -- anywhere anywhere

¡¡¡¡ACCEPT all -- anywhere anywhere

¡¡¡¡ACCEPT tcp -- anywhere anywhere tcp dpt:EtherNet/IP-1

¡¡¡¡ACCEPT tcp -- anywhere anywhere tcp dpt:http

¡¡¡¡REJECT all -- anywhere anywhere reject-with icmp-host-prohibited

¡¡¡¡Chain FORWARD £¨policy ACCEPT£©

¡¡¡¡target prot opt source destination

¡¡¡¡REJECT all -- anywhere anywhere reject-with icmp-host-prohibited

¡¡¡¡Chain OUTPUT £¨policy ACCEPT£©

¡¡¡¡target prot opt source destination

¡¡¡¡Chain f2b-NoAuthFailures £¨1 references£©

¡¡¡¡target prot opt source destination

¡¡¡¡REJECT all -- 64.68.50.128 anywhere reject-with icmp-port-unreachable

¡¡¡¡REJECT all -- 104.194.26.205 anywhere reject-with icmp-port-unreachable

¡¡¡¡RETURN all -- anywhere anywhere

¡¡¡¡ÈçºÎ´Ó Fail2ban ÖÐÒƳý IP

¡¡¡¡# iptables -D f2b-NoAuthFailures -s banned_ip -j REJECT

¡¡¡¡ÒÔÉϾÍÊÇCentOSϵͳ°ÑIP´ÓFail2banºÚÃûµ¥ÖÐÒƳýµÄ·½·¨ÁË£¬°ÑIPµØÖ·´ÓFail2banºÚÃûµ¥ÖÐÒƳýÁËÒÔºó£¬Ò²¾Í½â³ýÁ˸ÃIP¶Ô·þÎñÆ÷·ÃÎʵÄÏÞÖÆ¡£