Изменения документа Proxy

Сводка

• Свойства страницы (1 изменено, 0 добавлено, 0 удалено)

Подробности

Свойства страницы

Содержимое

...	...	@@ -62,58 +62,57 @@
62	62	sudo ufw allow OpenSSH
63	63	sudo ufw enable
64	64
65		-### fail2ban
	65	+
	66	+`sudo apt install fail2ban -y
	67	+sudo bash -c 'cat > /etc/fail2ban/jail.local << "JAIL"
	68	+[DEFAULT]
	69	+bantime = 24h
	70	+findtime = 10m
	71	+maxretry = 3
66	66
67		- sudo apt install fail2ban -y
68		- sudo bash -c 'cat > /etc/fail2ban/jail.local << "JAIL"
69		- [DEFAULT]
70		- bantime = 24h
71		- findtime = 10m
72		- maxretry = 3
73		-
74		- bantime.increment = true
75		- bantime.factor = 2
76		- bantime.maxtime = 4w
77		-
78		- banaction = iptables-multiport
79		- banaction_allports = iptables-allports
80		-
81		- ignoreip = 127.0.0.1/8 ::1
82		-
83		- [sshd]
84		- enabled = true
85		- logpath = %(sshd_log)s
86		- backend = %(sshd_backend)s
87		- maxretry = 3
88		- bantime = 48h
89		- findtime = 15m
90		- mode = aggressive
91		-
92		- [sshd-ddos]
93		- enabled = true
94		- logpath = %(sshd_log)s
95		- backend = %(sshd_backend)s
96		- maxretry = 5
97		- bantime = 24h
98		- findtime = 30s
99		-
100		- [recidive]
101		- enabled = true
102		- logpath = /var/log/fail2ban.log
103		- maxretry = 3
104		- bantime = 4w
105		- findtime = 7d
106		- banaction = iptables-allports
107		- JAIL
108		- apt-get update
109		- apt-get install -y fail2ban
110		- systemctl enable --now fail2ban
111		- systemctl restart fail2ban
112		- echo "fail2ban настроен и запущен"
113		- '
114		- systemctl enable fail2ban
115		- systemctl restart fail2ban
	73	+bantime.increment = true
	74	+bantime.factor = 2
	75	+bantime.maxtime = 4w
116	116
	77	+banaction = iptables-multiport
	78	+banaction_allports = iptables-allports
	79	+
	80	+ignoreip = 127.0.0.1/8 ::1
	81	+
	82	+[sshd]
	83	+enabled = true
	84	+logpath = %(sshd_log)s
	85	+backend = %(sshd_backend)s
	86	+maxretry = 3
	87	+bantime = 48h
	88	+findtime = 15m
	89	+mode = aggressive
	90	+
	91	+[sshd-ddos]
	92	+enabled = true
	93	+logpath = %(sshd_log)s
	94	+backend = %(sshd_backend)s
	95	+maxretry = 5
	96	+bantime = 24h
	97	+findtime = 30s
	98	+
	99	+[recidive]
	100	+enabled = true
	101	+logpath = /var/log/fail2ban.log
	102	+maxretry = 3
	103	+bantime = 4w
	104	+findtime = 7d
	105	+banaction = iptables-allports
	106	+JAIL
	107	+apt-get update
	108	+apt-get install -y fail2ban
	109	+systemctl enable --now fail2ban
	110	+systemctl restart fail2ban
	111	+echo "fail2ban настроен и запущен"
	112	+'
	113	+systemctl enable fail2ban
	114	+systemctl restart fail2ban`
	115	+
117	117	# ZSH
118	118
119	119	sudo apt update && sudo apt install -y zsh git fonts-powerline curl && \