Fail2ban防护#

1
sudo apt install -y fail2ban

1
sudo tee /etc/fail2ban/jail.d/sshd.local > /dev/null <<'EOF'
2
[DEFAULT]
3
bantime = 1d
4
findtime = 10m
5
maxretry = 5
6
banaction = nftables
7

8
[sshd]
9
enabled = true
10
backend = systemd
11
port = 22
12
EOF

1
sudo systemctl enable --now fail2ban
2
sudo fail2ban-client status
3
sudo fail2ban-client status sshd