Fail2ban/SSH: Unterschied zwischen den Versionen
Keine Bearbeitungszusammenfassung |
|||
| Zeile 43: | Zeile 43: | ||
== Konfiguration == | == Konfiguration == | ||
; sshd.conf in /etc/fail2ban/jail.d/ | |||
<syntaxhighlight lang="ini" copy line> | |||
[sshd] | |||
enabled = true | |||
backend = systemd | |||
port = ssh | |||
filter = sshd | |||
logpath = %(sshd_log)s | |||
maxretry = 5 | |||
findtime = 3m | |||
bantime = 1h | |||
action = iptables-multiport[name=sshd, port="ssh", chain="INPUT"] | |||
</syntaxhighlight> | |||
; Dienst neu starten | |||
<syntaxhighlight lang="bash" highlight="1" copy line> | |||
sudo systemctl restart fail2ban | |||
</syntaxhighlight> | |||
=== Dateien === | === Dateien === | ||
{| class="wikitable options big" | {| class="wikitable options big" | ||
Version vom 22. Februar 2026, 12:31 Uhr
Fail2ban/SSH - Beschreibung
Beschreibung
Installation
Aufruf
Optionen
| Unix | GNU | Parameter | Beschreibung |
|---|---|---|---|
Parameter
Umgebungsvariablen
Exit-Status
| Wert | Beschreibung |
|---|---|
| 0 | Erfolg |
| >0 | Fehler |
Anwendung
Problembehebung
Konfiguration
- sshd.conf in /etc/fail2ban/jail.d/
[sshd]
enabled = true
backend = systemd
port = ssh
filter = sshd
logpath = %(sshd_log)s
maxretry = 5
findtime = 3m
bantime = 1h
action = iptables-multiport[name=sshd, port="ssh", chain="INPUT"]
- Dienst neu starten
sudo systemctl restart fail2ban
Dateien
| Datei | Beschreibung |
|---|---|
Anhang
Siehe auch
Dokumentation
Links
Projekt
Weblinks
TMP
Konfiguration
- sshd.conf in /etc/fail2ban/jail.d/
[sshd]
enabled = true
backend = systemd
port = ssh
filter = sshd
logpath = %(sshd_log)s
maxretry = 5
findtime = 3m
bantime = 1h
action = iptables-multiport[name=sshd, port="ssh", chain="INPUT"]
- Dienst neu starten
sudo systemctl restart fail2ban