小编Mic*_*son的帖子

用于 phpMyadmin 暴力尝试的自定义 fail2ban 过滤器

为了阻止过多的失败phpMyAdmin登录尝试fail2ban,我创建了一个脚本来记录对文件的失败尝试:/var/log/phpmyadmin_auth.log


自定义日志

/var/log/phpmyadmin_auth.log文件格式为:

phpMyadmin login failed with username: root; ip: 192.168.1.50; url: http://somedomain.com/phpmyadmin/index.php
phpMyadmin login failed with username: ; ip: 192.168.1.50; url: http://192.168.1.48/phpmyadmin/index.php
Run Code Online (Sandbox Code Playgroud)

自定义过滤器

[Definition]

# Count all bans in the logfile
failregex = phpMyadmin login failed with username: .*; ip: <HOST>;
Run Code Online (Sandbox Code Playgroud)

phpMyAdmin 监狱

[phpmyadmin]

enabled  = true
port    = http,https
filter   = phpmyadmin
action   = sendmail-whois[name=HTTP]
logpath  = /var/log/phpmyadmin_auth.log
maxretry = 6
Run Code Online (Sandbox Code Playgroud)

fail2ban日志包含:

2012-10-04 10:52:22,756 fail2ban.server : INFO   Stopping all jails …
Run Code Online (Sandbox Code Playgroud)

security configuration fail2ban

10
推荐指数
1
解决办法
2万
查看次数

Wget、Curl、Yum 失败但 Ping 有效 - CentOS 5

我们目前有三个网络服务器。

服务器一和二表现良好,但我在第三个方面遇到了真正的问题。

wgetcurl并且yum都无法建立连接 - 也就是说,它们在解析主机并尝试连接后都挂起。

示例(我尝试了许多不同的网址):

# wget http://rpm.pbone.net/index.php3/stat/4/idpl/13941547/dir/centos_5/com/httpd-2.2.3-43.el5.centos.i386.rpm.html
--2010-09-02 20:00:26--  http://rpm.pbone.net/index.php3/stat/4/idpl/13941547/dir/centos_5/com/httpd-2.2.3-43.el5.centos.i386.rpm.html
Resolving rpm.pbone.net... 85.14.85.4
Connecting to rpm.pbone.net|85.14.85.4|:80... 
Run Code Online (Sandbox Code Playgroud)

... 悬挂

# curl -v http://rpm.pbone.net/index.php3/stat/4/idpl/13941547/dir/centos_5/com/httpd-2.2.3-43.el5.centos.i386.rpm.html
* About to connect() to rpm.pbone.net port 80
*   Trying 85.14.85.4... 
Run Code Online (Sandbox Code Playgroud)

... 悬挂

#yum -d9 update
Loading "fastestmirror" plugin
Config time: 0.052
Running "init" handler for "fastestmirror" plugin
Yum Version: 3.2.22
COMMAND: yum -d9 update 
Installroot: /
Setting up Package Sacks
Running "postreposetup" handler for "fastestmirror" plugin
Loading mirror speeds from …
Run Code Online (Sandbox Code Playgroud)

networking yum wget centos5

8
推荐指数
1
解决办法
4万
查看次数

标签 统计

centos5 ×1

configuration ×1

fail2ban ×1

networking ×1

security ×1

wget ×1

yum ×1