春有百花秋有月 - fail2ban
type: channel
link: https://www.313390.xyz/index.php/tag/fail2ban/
items: Debian Install fail2ban
items: Linux Server init

Debian Install fail2ban
type: item
date: 2023-11-20T16:13:00+08:00
description: Install fail2ban centos8 intall happend error: Error: Problem: problem with installed package selinux-policy-targeted-3.14.3-80.el8_5.2.noarch - package fail2ban-server-1.0.2-3.el8.noarch requires (fail2ban-selinux if selinux-policy-targeted), but none of the providers can be installed - package fail2ban-1.0.2-3.el8.noarch requires fail2ban-server = 1.0.2-3.el8, but none of the providers can be installed - conflicting requests - nothing provides selinux-policy >= 3.14.3-108.e l8_7.1 needed by fail2ban-selinux-1.0.2-3.el8.noarch - nothing provides selinux-policy-base >= 3.14.3-108.el8_7.1 needed by fail2ban-selinux-1.0.2-3.el8.noarch (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) 解决方式： yum install --allowerasing fail2ban apt-get install fail2ban 安装成功后增加规则文件：/etc/fail2ban/filter.d/shadowsocks-libev.conf 配置jail.local文件： [DEFAULT] backend = systemd bantime = 36000 findtime = 600 banaction = iptables-multiport destemail = bj.guozhong@gmail.com [sshd] enabled = true port = 22 filter = sshd logpath = /var/log/auth.log maxretry = 5 [shadowsocks-libev] enabled = true port = 3381 filter = shadowsocks-libev logpath = /var/log/auth.log maxretry = 3 bantime = 36000 findtime = 3600 systemctl start fail2ban systemctl status fail2ban systemctl enable fail2ban 查看日志和监狱内容 tail -f /var/log/fail2ban.log fail2ban-client status 查看某个规则下的baned状态： fail2ban-client status sshd 解除限制：fail2ban-client set sshd unbanip **** 有可能产生的问题: 1.新主机安装fail2ban无法启动，提示： Failed during configuration: Have not found any log file for sshd jail 原因应该是fail2ban默认开启ssh监控，却找不到ssh的日志。 网上搜索发现有人在GitHub上给出了解决方案。在jail设置里面加上以下内容即可顺利启动： [DEFAULT] backend = systemd 软件默认设置是auto，但似乎无法判定系统使用了systemd，只好手动指定。[...]

Linux Server init
type: item
date: 2023-06-05T14:11:00+08:00
description: 1.AWS创建新的实例 2.固定IP 绑定原IP或者使用新的IP，如绑定原IP需要先将原IP在原实例中解绑，然后在HOME-Networking中将原IP绑定到新的实例中。 [...]