软件包：fail2ban（0.10.2-2.1）

[ 源代码： fail2ban  ]

ban hosts that cause multiple authentication errors

Fail2ban monitors log files (e.g. /var/log/auth.log, /var/log/apache/access.log) and temporarily or persistently bans failure-prone addresses by updating existing firewall rules. Fail2ban allows easy specification of different actions to be taken such as to ban an IP using iptables or hostsdeny rules, or simply to send a notification email.

By default, it comes with filter expressions for various services (sshd, apache, qmail, proftpd, sasl etc.) but configuration can be easily extended for monitoring any other text file. All filters and actions are given in the config files, thus fail2ban can be adopted to be used with a variety of files and firewalls. Following recommends are listed:

 - iptables/nftables -- default installation uses iptables for banning.
   nftables is also suported. You most probably need it
 - whois -- used by a number of *mail-whois* actions to send notification
   emails with whois information about attacker hosts. Unless you will use
   those you don't need whois
 - python3-pyinotify -- unless you monitor services logs via systemd, you
   need pyinotify for efficient monitoring for log files changes

标签: 系统管理: 自动化和调度, 日志, admin::monitoring, implemented-in::python, 用户接口: 命令行, interface::daemon, network::firewall, 网络协议: IP, 角色: role::program, security::authentication, 安全性: 防火墙, security::ids, security::log-analyzer, Purpose: 登录, use::monitor, works-with-format::plaintext, 处理: 系统日志, 文本

其他与 fail2ban 有关的软件包

• dep: lsb-base (>= 2.0-7)

  Linux 标准规范初始化脚本功能

• dep: python3

  交互式高级面向对象语言（默认 python3 版本）

• rec: iptables

  数据包过滤和网络地址转换(NAT)管理工具

  或者 nftables

  控制包过滤规则的程序，来自 Netfilter 项目

• rec: python

  交互式高级面向对象语言（Python2 版本）

• rec: python3-pyinotify

  simple Linux inotify Python bindings

• rec: python3-systemd

  Python 3 bindings for systemd

• rec: whois

  intelligent WHOIS client

• sug: mailx

  本虚包由这些包填实： bsd-mailx, mailutils

• sug: monit

  软件包暂时不可用

• sug: sqlite3

  SQLite 3 命令行界面

• sug: system-log-daemon

  本虚包由这些包填实： busybox-syslogd, inetutils-syslogd, rsyslog, syslog-ng-core

下载 fail2ban

下载可用于所有硬件架构的

硬件架构	软件包大小	安装后大小	文件
all	375.6 kB	1,735.0 kB	[文件列表]