{"id":1494,"date":"2007-08-31T23:05:00","date_gmt":"2007-08-31T15:05:00","guid":{"rendered":"http:\/\/blog.pmail.idv.tw\/?p=1494"},"modified":"2007-08-31T23:05:00","modified_gmt":"2007-08-31T15:05:00","slug":"fail2ban%e4%bf%9d%e8%ad%b7vsftpd-server","status":"publish","type":"post","link":"https:\/\/blog.pmail.idv.tw\/?p=1494","title":{"rendered":"fail2ban\u4fdd\u8b77vsftpd-server"},"content":{"rendered":"<p>\u56e0\u70ba\u5de5\u4f5c\u9700\u8981\uff0c\u5728\u516c\u53f8\u5167\u90e8\u9700\u5229\u7528ftp\u4e0a\u50b3\u5c0f\u5de5\u5177\u6216\u662f\u6a94\u6848\u5230NAT\u4e3b\u6a5f\u4e0a\u9762<br \/>\u6240\u4ee5NAT\u4e3b\u6a5f\u4e0a\u9762\u6709\u958b\u653evsftpd\u670d\u52d9\uff0c\u56e0\u70ba\u662f\u6709\u6642\u5f8c\u624d\u6703\u7528\u5230,\u6240\u4ee5\u6703\u624b\u52d5<br \/>\u5c07\u670d\u52d9\u555f\u52d5\u5373\u505c\u6b62,\u4f46\u662f\u6709\u6642\u5019\u5fd8\u8a18\u505c\u6b62\u6642,\u9694\u5929\u67e5log\u5c31\u6703\u6709\u4e9b\u7121\u804a\u7684\u7db2\u53cb<br \/>\u4f86\u6e2c\u8a66\u9023\u7ddaftp\u771f\u662f\u6a5f\u8eca<\/p>\n<p><!--more--><\/p>\n<p>\u6240\u4ee5\u60f3\u4e86\u500b\u8fa6\u6cd5\u5c31\u662f\u5229\u7528\u4e4b\u524dfail2ban,\u597d\u50cf\u4e5f\u53ef\u4ee5\u4fdd\u8b77vsftpd,\u770b\u4e86\u4e00\u4e0b\u8a2d\u5b9a\u6a94\u6709<\/p>\n<p>\u5982\u4e0b<\/p>\n<p>[VSFTPD]<br \/># Option: enabled<br \/># Notes.: enable monitoring for this section.<br \/># Values: [true | false] Default: false<br \/>#<br \/><strong>enabled = false (\u53ea\u8981\u5c07\u9019\u4e00\u884c\u6539\u6210 true\u5373\u53ef)<\/strong><\/p>\n<p># Option: logfile<br \/># Notes.: logfile to monitor.<br \/># Values: FILE Default: \/var\/log\/secure<br \/>#<br \/>logfile = \/var\/log\/vsftpd.log <\/p>\n<p># Option:&nbsp; port<br \/># Notes.:&nbsp; specifies port to monitor<br \/># Values:&nbsp; [ NUM | STRING ]&nbsp; Default:<br \/>#<br \/>port = ftp <\/p>\n<p># Option: timeregex<br \/># Notes.: regex to match timestamp in VSFTPD logfile.<br \/># Values: [Mar 7 17:53:28]<br \/># Default: S{3}s{1,2}d{1,2} d{2}:d{2}:d{2}<br \/>#<br \/>timeregex = S{3}s{1,2}d{1,2} d{2}:d{2}:d{2} <\/p>\n<p># Option: timepattern<br \/># Notes.: format used in &#8220;timeregex&#8221; fields definition. Note that &#8216;%&#8217; must be<br \/># escaped with &#8216;%&#8217; (see <a href=\"http:\/\/rgruet.free.fr\/PQR2.3.html#timeModule\">http:\/\/rgruet.free.fr\/PQR2.3.html#timeModule<\/a>)<br \/># Values: TEXT Default: %%b %%d %%H:%%M:%%S<br \/>#<br \/>timepattern = %%b %%d %%H:%%M:%%S <\/p>\n<p># Option: failregex<br \/># Notes.: regex to match the password failures messages in the logfile.<br \/># Values: TEXT Default: Authentication failure|Failed password|Invalid user<br \/>#<br \/>failregex = FAIL LOGIN<\/p>\n<p>\u518d\u4f86\u5c31\u662f\u5c31\u662f\u8a2d\u5b9avsftpd\u7684log<br \/>\u4fee\u6539 \/etc\/vsftpd\/vsftpd.conf<br \/>\u5c07#xferlog_file=\/var\/log\/vsftpd.log \u5c07#\u5b57\u865f\u62ff\u6389\u91cd\u65b0\u555f\u52d5vsftpd\u670d\u52d9\u5373\u53ef<br \/>\u56e0\u70ba\u4e4b\u524d\u7684\u8a2d\u5b9a maxfailures = 3 \u8868\u793a3\u6b21\u932f\u8aa4\u5c31\u5c01\u9396,\u6240\u4ee5\u53ef\u4ee5\u5c0f\u5c0f\u7684\u4fdd\u8b77\u4e00\u4e0bftp-server<\/p>\n<div class=\"21cd169d3c0f71e95b84db320302cb4a\" data-index=\"1\" style=\"float: right; margin:10px 0 10px 10px;\">\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-8711325745898650\"\r\n     crossorigin=\"anonymous\"><\/script>\n<\/div>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>\u56e0\u70ba\u5de5\u4f5c\u9700\u8981\uff0c\u5728\u516c\u53f8\u5167\u90e8\u9700\u5229\u7528ftp\u4e0a\u50b3\u5c0f\u5de5\u5177\u6216\u662f\u6a94\u6848\u5230NAT\u4e3b\u6a5f\u4e0a\u9762\u6240\u4ee5NAT &hellip; <a href=\"https:\/\/blog.pmail.idv.tw\/?p=1494\">\u95b1\u8b80\u5168\u6587 <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[32],"tags":[],"class_list":["post-1494","post","type-post","status-publish","format-standard","hentry","category-linux-vsftp"],"_links":{"self":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/1494","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1494"}],"version-history":[{"count":0,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/1494\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1494"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1494"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1494"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}