1
2
3

$ sudo service iptables stop
$ sudo systemctl start firewalld
$ sudo systemctl enable firewalld.service

1
2
3

$ sudo dnf install epel-release
$ sudo dnf install firewalld
$ sudo dnf install fail2ban

1
2

$ sudo cp /etc/fail2ban/jail.{conf,local}
$ sudo vim /etc/fail2ban/jail.local

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

[DEFAULT]
ignoreip = 1.2.3.4/24
bantime  = 1d
findtime  = 1h
maxretry = 5
banaction = firewallcmd-ipset

[sshd]
enabled = true

[nginx-botsearch]
enabled = true
filter = nginx-botsearch
logpath = /var/log/nginx/error.log
          /var/log/nginx/aaa.error.log
          /var/log/nginx/bbb.error.log
          /var/log/nginx/ccc.error.log

[nginx-botsearch]
enabled = true
filter = nginx-botsearch
logpath = /var/log/nginx/*error.log

1
2
3
4
5
6

$ sudo systemctl start fail2ban
$ sudo systemctl enable fail2ban
$ sudo systemctl status fail2ban
$ sudo fail2ban-client version
$ sudo tail -f /var/log/fail2ban.log
$ fail2ban-client -h

1
2
3
4
5

$ sudo fail2ban-client status
$ sudo fail2ban-client status sshd

$ sudo fail2ban-client set sshd unbanip 23.34.45.56
$ sudo fail2ban-client set sshd banip 23.34.45.56

1
2
3

nginx-botsearch
nginx-http-auth
nginx-limit-req