Различия

Показаны различия между двумя версиями страницы.

--- linux:f2b [2021/10/04 15:43]
admin
+++ linux:f2b [2022/06/26 04:42] (текущий)
admin
@@ Строка 32: / Строка 32: @@
 Для вечного бана нужно указать **-1**.
+<details>
+<summary> :!: Пример конфигурации ssh</summary>
 <code bash>
 [DEFAULT]
@@ Строка 47: / Строка 49: @@
 logpath = /var/log/auth.log
 </code>
+</details>
+<details>
+<summary> :!: Еще пример, ssh+ apache</summary>
+<code bash>
+[DEFAULT]
+maxretry = 3
+findtime = 480
+bantime = -1
+action = iptables-allports
+ignoreip = 92.124.136.88
+[sshd]
+enabled = true
+port = ssh
+filter = sshd
+action = iptables[name=sshd, port=ssh, protocol=tcp, blocktype="DROP"]
+logpath = /var/log/auth.log
+[apache]
+enabled = true
+port = http,https
+filter = apache-auth
+action = iptables[name=apache-auth, port=http,https, protocol=tcp, blocktype="DROP"]
+logpath = /var/log/apache*/*error.log
+[apache-overflows]
+enabled = true
+port = http,https
+filter = apache-overflows
+action = iptables[name=apache-overflows, port=http,https, protocol=tcp, blocktype="DROP"]
+logpath = /var/log/apache*/*error.log
+[apache-badbots]
+enabled = true
+port = http,https
+filter = apache-badbots
+action = iptables[name=apache-badbots, port=http,https, protocol=tcp, blocktype="DROP"]
+logpath = /var/log/apache*/*error.log
+</code>
+</details>

zxcx