Fail2ban Handling: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
(→Config) |
|||
| (30 dazwischenliegende Versionen von 3 Benutzern werden nicht angezeigt) | |||
| Zeile 1: | Zeile 1: | ||
=Install= | =Install= | ||
| − | *sudo apt install fail2ban | + | *sudo apt install fail2ban iptables |
| + | |||
=Nach der Installation stehen folgende Programme zur Verfügung= | =Nach der Installation stehen folgende Programme zur Verfügung= | ||
*fail2ban-server - der Server | *fail2ban-server - der Server | ||
*fail2ban-client - Clientprogramm zur Konfiguration und Auswertung des Servers | *fail2ban-client - Clientprogramm zur Konfiguration und Auswertung des Servers | ||
| − | *fail2ban-regex - Programm zum Testen von Regular-Expressions | + | *fail2ban-regex - Programm zum Testen von Regular-Expressions |
| + | |||
=Konfigurationsdatein= | =Konfigurationsdatein= | ||
| − | == | + | *[[Fail2ban Konfigurationsdatein]] |
| − | + | ||
| + | =Example ssh= | ||
| + | |||
| + | [sshd] | ||
| + | enabled = true | ||
| + | port = ssh | ||
| + | filter = sshd | ||
| + | logpath = /var/log/auth.log | ||
| + | maxretry = 4 | ||
| + | |||
| + | =Example wordpress= | ||
| + | [[Fail2ban_Handling_Wordpress|Wordpress]] | ||
| + | |||
| + | =Example dovecot= | ||
<pre> | <pre> | ||
| − | [ | + | [dovecot] |
| − | + | enabled = true | |
| − | + | port = pop3,pop3s,imap,imaps | |
| − | + | filter = dovecot | |
| − | + | logpath = /var/log/mail.log | |
| + | maxretry = 3 | ||
</pre> | </pre> | ||
| + | =Example apache2= | ||
| + | <pre> | ||
| + | [apache] | ||
| + | enabled = true | ||
| + | port = http,https | ||
| + | filter = apache-auth | ||
| + | logpath = /var/log/apache*/*error.log | ||
| + | maxretry = 6 | ||
| + | </pre> | ||
| − | = | + | =Example vsftp= |
| − | + | [[Fail2ban_Handling_Vsftp|vsftp]] | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
=Links= | =Links= | ||
*https://www.thomas-krenn.com/de/wiki/SSH_Login_unter_Debian_mit_fail2ban_absichern | *https://www.thomas-krenn.com/de/wiki/SSH_Login_unter_Debian_mit_fail2ban_absichern | ||
Aktuelle Version vom 3. September 2023, 20:06 Uhr
Install
- sudo apt install fail2ban iptables
Nach der Installation stehen folgende Programme zur Verfügung
- fail2ban-server - der Server
- fail2ban-client - Clientprogramm zur Konfiguration und Auswertung des Servers
- fail2ban-regex - Programm zum Testen von Regular-Expressions
Konfigurationsdatein
Example ssh
[sshd] enabled = true port = ssh filter = sshd logpath = /var/log/auth.log maxretry = 4
Example wordpress
Example dovecot
[dovecot] enabled = true port = pop3,pop3s,imap,imaps filter = dovecot logpath = /var/log/mail.log maxretry = 3
Example apache2
[apache] enabled = true port = http,https filter = apache-auth logpath = /var/log/apache*/*error.log maxretry = 6