Fail2ban Ubuntu/Debian安装sudo apt-get install fail2ban源码安装git clone https://github.com/fail2ban/fail2ban.git cd fail2ban sudo python setup.py installDebian 12 手动安装 rsyslogsudo apt-get install rsyslog配置信息cd /etc/fail2ban cp jail.conf jail.local cp fail2ban.conf fail2ban.local注意，修改jail.local和fail2ban.local同样有效。输入vi jail.local可修改配置信息。启动服务sudo systemctl start fail2ban开机启动sudo systemctl enable fail2ban服务状态sudo systemctl status fail2ban重启服务systemctl restart fail2ban查看启用fail2ban-client status fail2ban-client status sshd手动解除限制ipfail2ban-client unban 127.0.0.1 fail2ban-client unban --all默认配置#DEFAULT-START [DEFAULT] bantime = 600 findtime = 300 maxretry = 5 banaction = firewallcmd-ipset action = %(action_mwl)s #DEFAULT-END [sshd] ignoreip = 127.0.0.1/8 # 白名单 enabled = true filter = sshd port = 22 # 端口 maxretry = 2 # 最大尝试次数 findtime = 300 # 发现周期 单位s bantime = 600 # 封禁时间，单位s。-1为永久封禁 action = %(action_mwl)s banaction = iptables-multiport # 禁用方式 logpath = /var/log/secure # SSH 登陆日志位置