一、新加倉(cāng)庫(kù)源地址
二、安裝
三、查看日志
四、查看啟用監(jiān)控的列表
五、查看被sshd服務(wù)進(jìn)制的ip地址：
六、從fail2ban中刪除進(jìn)制的IP地址
一、新加倉(cāng)庫(kù)源地址
# yum install epel-release
# rm -f epel-*.repo
# cat /etc/redhat-release
Anolis OS release 8.6
刪除epel.repo中原有內(nèi)容，添加下面內(nèi)容：
# cat /etc/yum.repos.d/epel.repo
[epel]
name=Extra Packages for Enterprise Linux $releasever - $basearch
# It is much more secure to use the metalink, but if you wish to use a local mirror
# place it's address here.
#baseurl=https://download.example/pub/epel/$releasever/Everything/$basearch
#metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-$releasever&arch=$basearch&infra=$infra&content=$contentdir
baseurl=https://mirrors.aliyun.com/epel/$releasever/Everything/$basearch
repo=epel-$releasever&arch=$basearch&infra=$infra&content=$contentdir
enabled=1
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-8
[epel-debuginfo]
name=Extra Packages for Enterprise Linux $releasever - $basearch - Debug
# It is much more secure to use the metalink, but if you wish to use a local mirror
# place it's address here.
#baseurl=https://download.example/pub/epel/$releasever/Everything/$basearch/debug
#metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-debug-$releasever&arch=$basearch&infra=$infra&content=$contentdir
baseurl=https://mirrors.aliyun.com/epel/$releasever/Everything/$basearch/debug
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-8
gpgcheck=1
[epel-source]
name=Extra Packages for Enterprise Linux $releasever - $basearch - Source
# It is much more secure to use the metalink, but if you wish to use a local mirror
# place it's address here.
#baseurl=https://download.example/pub/epel/$releasever/Everything/SRPMS
#metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-source-$releasever&arch=$basearch&infra=$infra&content=$contentdir
baseurl=https://mirrors.aliyun.com/epel/$releasever/Everything/SRPMS
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-8
gpgcheck=1
# dnf repolist epel -v
二、安裝
# yum -y install fail2ban??syslog
新建配置文件
# pwd
/etc/fail2ban
# cat jail.local
[DEFAULT]
bantime = 86400
findtime = 600
maxretry = 3
banaction = iptables-multiport
[sshd]
enabled = true
port = 4033
filter = sshd
logpath = /var/log/secure
maxretry = 3
啟動(dòng)：
# systemctl enable fail2ban
三、查看日志
四、查看啟用監(jiān)控的列表
五、查看被sshd服務(wù)進(jìn)制的ip地址：
# fail2ban-client status sshd
# fail2ban-client get sshd banip
在防火墻中被拒絕的IP
#?iptable? -nvL
六、從fail2ban中刪除進(jìn)制的IP地址
# fail2ban-client? set sshd? unbanip 192.168.3.66
