centos7 fail2ban 설정

# yum -y install fail2ban fail2ban-systemd

# systemctl enable fail2ban

# chkconfig fail2ban on

# systemctl start fail2ban

# systemctl status fail2ban

기본룰 복사

# cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local

# vi /etc/fail2ban/jail.local

10분간 차단
bantime = 10m

5번 실패시 차단
maxretry = 5

차단해제

# fail2ban-client set vsftpd unbanip 1xx.1xx.2xx.2xx

상태확인

# fail2ban-client status vsftpd
Status for the jail: vsftpd
|- Filter
| |- Currently failed: 0
| |- Total failed: 5
| `- Journal matches:
`- Actions
 |- Currently banned: 0
 |- Total banned: 1
 `- Banned IP list:

https://www.fail2ban.org/wiki/index.php/MANUAL_0_8

MANUAL 0 8 - Fail2ban