Fail2Ban 配置生成器
为 SSH、Nginx、Apache、Postfix 及自定义服务生成 Fail2Ban jail.local 配置。
jail.local
# Fail2Ban jail.local · 由防盾工具箱生成 # 安放路径: /etc/fail2ban/jail.local [DEFAULT] bantime = 3600 findtime = 600 maxretry = 5 ignoreip = 127.0.0.1/8 backend = systemd banaction = iptables-multiport [sshd] enabled = true port = ssh filter = sshd logpath = %(auth_log)s maxretry = 3 [nginx-limit-req] enabled = true filter = nginx-limit-req logpath = /var/log/nginx/error.log maxretry = 5 [nginx-botsearch] enabled = true logpath = /var/log/nginx/access.log maxretry = 2 # 重载配置 # systemctl restart fail2ban && fail2ban-client status
