套件：fail2ban（0.11.2-2）

[ 原始碼： fail2ban  ]

ban hosts that cause multiple authentication errors

Fail2ban monitors log files (e.g. /var/log/auth.log, /var/log/apache/access.log) and temporarily or persistently bans failure-prone addresses by updating existing firewall rules. Fail2ban allows easy specification of different actions to be taken such as to ban an IP using iptables or hostsdeny rules, or simply to send a notification email.

By default, it comes with filter expressions for various services (sshd, apache, proftpd, sasl, etc.) but configuration can be easily extended for monitoring any other text file. All filters and actions are given in the config files, thus fail2ban can be adopted to be used with a variety of files and firewalls. Following recommends are listed:

 - iptables/nftables -- default installation uses iptables for banning.
   nftables is also supported. You most probably need it
 - whois -- used by a number of *mail-whois* actions to send notification
   emails with whois information about attacker hosts. Unless you will use
   those you don't need whois
 - python3-pyinotify -- unless you monitor services logs via systemd, you
   need pyinotify for efficient monitoring for log files changes

標籤: 系統管理: 自動化和排程, 日誌, admin::monitoring, implemented-in::python, 使用者介面: 命令行, interface::daemon, network::firewall, Network Protocol: IP, 角色: role::program, security::authentication, 安全性: 防火牆, security::ids, security::log-analyzer, Purpose: 登入, use::monitor, works-with-format::plaintext, 處理: 系統日誌, 文字

其他與 fail2ban 有關的套件

• dep: lsb-base (>= 2.0-7)

  Linux Standard Base init script functionality

• dep: python3

  interactive high-level object-oriented language (default python3 version)

• rec: nftables

  Program to control packet filtering rules by Netfilter project

  或者 iptables

  administration tools for packet filtering and NAT

• rec: python3-pyinotify

  simple Linux inotify Python bindings

• rec: python3-systemd

  Python 3 bindings for systemd

• rec: whois

  intelligent WHOIS client

• sug: mailx

  本虛擬套件由這些套件填實： bsd-mailx, mailutils

• sug: monit

  utility for monitoring and managing daemons or similar programs

• sug: sqlite3

  Command line interface for SQLite 3

• sug: system-log-daemon

  本虛擬套件由這些套件填實： busybox-syslogd, inetutils-syslogd, rsyslog, socklog-run, syslog-ng-core

下載 fail2ban

下載可用於所有硬體架構的

硬體架構	套件大小	安裝後大小	檔案
all	440。4 kB	2，092。0 kB	[檔案列表]