{"id":3074,"date":"2021-08-23T19:06:25","date_gmt":"2021-08-23T10:06:25","guid":{"rendered":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=3074"},"modified":"2021-08-28T22:09:54","modified_gmt":"2021-08-28T13:09:54","slug":"fail2ban-%ec%84%a4%ec%b9%98","status":"publish","type":"post","link":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=3074","title":{"rendered":"fail2ban \uc124\uce58"},"content":{"rendered":"<h1>fail2ban \uc124\uce58<\/h1>\n<p><a href=\"https:\/\/www.lesstif.com\/ws\/fail2ban-ssh-46367074.html\">\ucc38\uc870<\/a><\/p>\n<h2>\ubaa9\ud45c<\/h2>\n<p>brute force(\ubb34\ucc28\ubcc4 \ub300\uc785\uacf5\uaca9) \uc744 \uc774\uc6a9\ud55c ssh \uc811\uc18d\uc2dc\ub3c4\ub97c \ucc28\ub2e8\ud569\ub2c8\ub2e4.<\/p>\n<h2>\uc124\uce58<\/h2>\n<p>RHEL\/CentOS<\/p>\n<pre><code class=\"language-bash\">sudo rpm -Uvh https:\/\/dl.fedoraproject.org\/pub\/epel\/epel-release-latest-7.noarch.rpm\n\nsudo yum --enablerepo epel install fail2ban<\/code><\/pre>\n<p>Ubuntu<\/p>\n<pre><code class=\"language-bash\">sudo apt install fail2ban<\/code><\/pre>\n<h2>\uc11c\ube44\uc2a4 \ud65c\uc131\ud654<\/h2>\n<pre><code class=\"language-bash\">sudo systemctl enable fail2ban\nsudo systemctl restart fail2ban<\/code><\/pre>\n<h2>\uae30\ubcf8\uc124\uc815<\/h2>\n<p>10\ubd84\ub3d9\uc548 5\ud68c \uc774\uc0c1 \ub85c\uadf8\uc778\uc2dc\ub3c4\uac00 \uc2e4\ud328\ud558\uba74, 10\ubd84\uac04 \ub85c\uadf8\uc778\uc744 \ucc28\ub2e8\ud569\ub2c8\ub2e4.<\/p>\n<h2>\uc124\uc815\ubcc0\uacbd<\/h2>\n<p>\uae30\ubcf8\uc124\uc815\ud30c\uc77c\uc740 <code>\/etc\/fail2ban\/jail.conf<\/code> \uc785\ub2c8\ub2e4.<br \/>\n\uae30\ubcf8\uc124\uc815\ud30c\uc77c\uc758 \uc218\uc815\uc740 \uad8c\uc7a5\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.<br \/>\n\ub300\uc2e0 \uc2e0\uaddc\ub85c \uc124\uc815\ud30c\uc77c\uc744 \uc0dd\uc131\ud560 \uac83\uc774 \uad8c\uc7a5\ub429\ub2c8\ub2e4.<\/p>\n<p>\ucc28\ub2e8\uc2dc\uac04\uc744 \ud55c\uc2dc\uac04\uc73c\ub85c \ub298\ub9bd\ub2c8\ub2e4.<br \/>\n\ucc28\ub2e8\ud588\uc74c\uc5d0\ub3c4 \ub85c\uadf8\uc778\uc2dc\ub3c4\uac00 \uc788\uc73c\uba74 \ucc28\ub2e8\uc2dc\uac04\uc744 \ub450\ubc30\uc529 \uc99d\uac00\uc2dc\ucf1c \uac11\ub2c8\ub2e4.<\/p>\n<p>ssh \ud3ec\ud2b8 \ubc88\ud638\ub97c \ubcc0\uacbd\ud588\ub2e4\uba74 \uc124\uc815\uc744 \ucd94\uac00\ud574 \uc90d\ub2c8\ub2e4.<\/p>\n<p>mode \ub97c aggressive \ub85c \ubcc0\uacbd\ud558\uba74, \ube44\ubc00\ubc88\ud638 \uc778\uc99d\uc2e4\ud328 \ubfd0\ub9cc \uc544\ub2c8\ub77c,<br \/>\nddos, \uacf5\uac1c\ud0a4 \uc778\uc99d\uc2e4\ud328\uc5d0\ub3c4 \ucc28\ub2e8\uc774 \uc791\ub3d9\ud569\ub2c8\ub2e4.<\/p>\n<pre><code class=\"language-bash\">sudo vi \/etc\/fail2ban\/jail.local\n------------------------------\n[DEFAULT]\nbantime = 1h\nbantime.increment = true\n\n[sshd]\nenabled = true\nport = 10022\nmode   = aggressive\n------------------------------<\/code><\/pre>\n<pre><code class=\"language-bash\">sudo systemctl restart fail2ban<\/code><\/pre>\n<pre><code class=\"language-bash\">sudo fail2ban-client get sshd bantime\nsudo fail2ban-client get sshd bantime.increment\n\nsudo fail2ban-client status sshd<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>fail2ban \uc124\uce58 \ucc38\uc870 \ubaa9\ud45c brute force(\ubb34\ucc28\ubcc4 \ub300\uc785\uacf5\uaca9) \uc744 \uc774\uc6a9\ud55c ssh \uc811\uc18d\uc2dc\ub3c4\ub97c \ucc28\ub2e8\ud569\ub2c8\ub2e4. \uc124\uce58 RHEL\/CentOS sudo rpm -Uvh https:\/\/dl.fedoraproject.org\/pub\/epel\/epel-release-latest-7.noarch.rpm sudo yum &#8211;enablerepo epel install fail2ban Ubuntu sudo apt install fail2ban \uc11c\ube44\uc2a4 \ud65c\uc131\ud654 sudo systemctl enable fail2ban sudo systemctl restart fail2ban \uae30\ubcf8\uc124\uc815 10\ubd84\ub3d9\uc548 5\ud68c \uc774\uc0c1 \ub85c\uadf8\uc778\uc2dc\ub3c4\uac00 \uc2e4\ud328\ud558\uba74, 10\ubd84\uac04 \ub85c\uadf8\uc778\uc744 \ucc28\ub2e8\ud569\ub2c8\ub2e4. \uc124\uc815\ubcc0\uacbd \uae30\ubcf8\uc124\uc815\ud30c\uc77c\uc740 \/etc\/fail2ban\/jail.conf \uc785\ub2c8\ub2e4. \uae30\ubcf8\uc124\uc815\ud30c\uc77c\uc758 \uc218\uc815\uc740 \uad8c\uc7a5\ub418\uc9c0\u2026 <span class=\"read-more\"><a href=\"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=3074\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-3074","post","type-post","status-publish","format-standard","hentry","category-devops"],"_links":{"self":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/3074","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3074"}],"version-history":[{"count":15,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/3074\/revisions"}],"predecessor-version":[{"id":3206,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/3074\/revisions\/3206"}],"wp:attachment":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3074"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3074"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3074"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}