{"id":1493,"date":"2007-08-07T23:02:00","date_gmt":"2007-08-07T15:02:00","guid":{"rendered":"http:\/\/blog.pmail.idv.tw\/?p=1493"},"modified":"2007-08-07T23:02:00","modified_gmt":"2007-08-07T15:02:00","slug":"nat%e4%b8%bb%e6%a9%9f%e5%ae%89%e5%85%a8%e6%80%a7%e5%8a%a0%e5%bc%b75-%e5%ae%89%e8%a3%9dfail2ban-%e5%b0%81%e9%8e%96%e5%98%97%e8%a9%a6%e4%be%b5%e5%85%a5%e7%9a%84-ip","status":"publish","type":"post","link":"https:\/\/blog.pmail.idv.tw\/?p=1493","title":{"rendered":"NAT\u4e3b\u6a5f\u5b89\u5168\u6027\u52a0\u5f37(5) (\u5b89\u88ddFail2ban \u5c01\u9396\u5617\u8a66\u4fb5\u5165\u7684 IP)"},"content":{"rendered":"<p>\u9019\u5b89\u88dd\u6b64\u5de5\u5177\u4e3b\u8981\u7684\u52a0\u5f37\uff0cNAT\u4e3b\u6a5f\u4e0asshd\u7684\u9632\u8b77\uff0c<br \/>\u57fa\u672c\u904b\u4f5c\u539f\u7406: <a href=\"http:\/\/www.fail2ban.org\/wiki\/index.php\/Main_Page\">fail2ban<\/a> (daemon) \u2192 \u76e3\u8996 log file \u2192 \u9023\u7e8c\u51fa\u73fe\u591a\u6b21\u932f\u8aa4\u8a0a\u606f \u2192 \u5c01\u9396\u4f86\u6e90 IP<br \/>\u5b98\u65b9\u7db2\u7ad9\uff1a<a href=\"http:\/\/www.fail2ban.org\/wiki\/index.php\/Main_Page\">http:\/\/www.fail2ban.org\/wiki\/index.php\/Main_Page<\/a><\/p>\n<p><!--more--><\/p>\n<p>\u8a2d\u5b9a\u6a94\uff1a\/etc\/fail2ban.conf<br \/>\u7de8\u8f2f vi \/etc\/fail2ban.conf<\/p>\n<p>#\u4ee5 daemon \u65b9\u5f0f\u555f\u52d5 fail2ban<br \/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; background = true <\/p>\n<blockquote>\n<p>#\u5141\u8a31\u5617\u8a66\u6b21\u6578<br \/>maxfailures = 3 <\/p>\n<p>#\u89f8\u767c maxfailures \u4e4b\u5f8c\u7684\u5c01\u9396\u6642\u9593(\u79d2); \u8a2d\u70ba -1 \u8868\u793a\u6c38\u9060\u5c01\u9396<br \/>bantime = 600 <\/p>\n<p>#\u4ee5 findtime (\u79d2) \u6642\u9593\u5167\u7684\u932f\u8aa4\u8a18\u9304\u4f5c\u70ba maxfailures \u7684\u8a08\u6578\u57fa\u6e96<br \/>findtime = 600 <\/p>\n<p>#\u6392\u9664 IP \u7bc4\u570d, \u4ee5\u7a7a\u767d\u9694\u958b<br \/>ignoreip = 127.0.0.1 192.168.0.0\/24 <\/p>\n<p>#\u4e0d\u555f\u7528 mail \u901a\u77e5<br \/>[MAIL] <\/p>\n<p>enabled = false <\/p>\n<p>#\u672a\u63d0\u53ca\u7684\u90e8\u4efd\u4fdd\u6301\u539f\u8a2d\u5b9a<br \/>[SSH] <\/p>\n<p>enabled = true<br \/>logfile = \/var\/log\/secure<\/p>\n<p>\u8a2d\u5b9a\u958b\u6a5f\u555f\u52d5\uff1achkconfig fail2ban on<br \/>\u624b\u52d5\u555f\u52d5\uff1a&nbsp;&nbsp; service fail2ban start<\/p>\n<p>\u555f\u52d5\u5f8c\u5229\u7528iptables -L -nv \u67e5\u770b\u6703\u591a\u4e86\u4e00\u689d\u898f\u5247(\u5982\u4e0b)<\/p>\n<p>Chain fail2ban-SSH (1 references)<br \/>pkts&nbsp;&nbsp; bytes&nbsp;&nbsp; target&nbsp;&nbsp;&nbsp;&nbsp; prot&nbsp;&nbsp; opt&nbsp;&nbsp; in&nbsp;&nbsp;&nbsp;&nbsp; out&nbsp;&nbsp;&nbsp;&nbsp; source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; destination<br \/>59&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 3764&nbsp;&nbsp; RETURN&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp; &#8212;&nbsp;&nbsp;&nbsp;&nbsp; *&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; *&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0.0.0.0\/0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0.0.0.0\/0<\/p>\n<\/blockquote>\n<div class=\"21cd169d3c0f71e95b84db320302cb4a\" data-index=\"1\" style=\"float: right; margin:10px 0 10px 10px;\">\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-8711325745898650\"\r\n     crossorigin=\"anonymous\"><\/script>\n<\/div>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>\u9019\u5b89\u88dd\u6b64\u5de5\u5177\u4e3b\u8981\u7684\u52a0\u5f37\uff0cNAT\u4e3b\u6a5f\u4e0asshd\u7684\u9632\u8b77\uff0c\u57fa\u672c\u904b\u4f5c\u539f\u7406: fail2b &hellip; <a href=\"https:\/\/blog.pmail.idv.tw\/?p=1493\">\u95b1\u8b80\u5168\u6587 <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[17],"tags":[],"class_list":["post-1493","post","type-post","status-publish","format-standard","hentry","category-linux-nat"],"_links":{"self":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/1493","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1493"}],"version-history":[{"count":0,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/1493\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1493"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1493"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1493"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}