为了阻止过多的失败phpMyAdmin
登录尝试fail2ban
,我创建了一个脚本来记录对文件的失败尝试:/var/log/phpmyadmin_auth.log
自定义日志
/var/log/phpmyadmin_auth.log
文件格式为:
phpMyadmin login failed with username: root; ip: 192.168.1.50; url: http://somedomain.com/phpmyadmin/index.php
phpMyadmin login failed with username: ; ip: 192.168.1.50; url: http://192.168.1.48/phpmyadmin/index.php
Run Code Online (Sandbox Code Playgroud)
自定义过滤器
[Definition]
# Count all bans in the logfile
failregex = phpMyadmin login failed with username: .*; ip: <HOST>;
Run Code Online (Sandbox Code Playgroud)
phpMyAdmin 监狱
[phpmyadmin]
enabled = true
port = http,https
filter = phpmyadmin
action = sendmail-whois[name=HTTP]
logpath = /var/log/phpmyadmin_auth.log
maxretry = 6
Run Code Online (Sandbox Code Playgroud)
该fail2ban
日志包含:
2012-10-04 10:52:22,756 fail2ban.server : INFO Stopping all jails …
Run Code Online (Sandbox Code Playgroud) 我们目前有三个网络服务器。
服务器一和二表现良好,但我在第三个方面遇到了真正的问题。
wget
,curl
并且yum
都无法建立连接 - 也就是说,它们在解析主机并尝试连接后都挂起。
示例(我尝试了许多不同的网址):
# wget http://rpm.pbone.net/index.php3/stat/4/idpl/13941547/dir/centos_5/com/httpd-2.2.3-43.el5.centos.i386.rpm.html
--2010-09-02 20:00:26-- http://rpm.pbone.net/index.php3/stat/4/idpl/13941547/dir/centos_5/com/httpd-2.2.3-43.el5.centos.i386.rpm.html
Resolving rpm.pbone.net... 85.14.85.4
Connecting to rpm.pbone.net|85.14.85.4|:80...
Run Code Online (Sandbox Code Playgroud)
... 悬挂
# curl -v http://rpm.pbone.net/index.php3/stat/4/idpl/13941547/dir/centos_5/com/httpd-2.2.3-43.el5.centos.i386.rpm.html
* About to connect() to rpm.pbone.net port 80
* Trying 85.14.85.4...
Run Code Online (Sandbox Code Playgroud)
... 悬挂
#yum -d9 update
Loading "fastestmirror" plugin
Config time: 0.052
Running "init" handler for "fastestmirror" plugin
Yum Version: 3.2.22
COMMAND: yum -d9 update
Installroot: /
Setting up Package Sacks
Running "postreposetup" handler for "fastestmirror" plugin
Loading mirror speeds from …
Run Code Online (Sandbox Code Playgroud)