{"id":437,"date":"2026-01-26T08:53:10","date_gmt":"2026-01-26T08:53:10","guid":{"rendered":"https:\/\/blog.gpst.net.cn:4008\/?p=437"},"modified":"2026-01-28T06:24:13","modified_gmt":"2026-01-28T06:24:13","slug":"%e5%ae%89%e8%a3%85fail2ban","status":"publish","type":"post","link":"https:\/\/opshub.com.cn\/?p=437","title":{"rendered":"\u5b89\u88c5fail2ban"},"content":{"rendered":"\n<p>\u4e0b\u8f7d\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/fail2ban\/fail2ban\/archive\/refs\/tags\/1.1.0.tar.gz\">https:\/\/github.com\/fail2ban\/fail2ban\/archive\/refs\/tags\/1.1.0.tar.gz<\/a><\/p>\n\n\n\n<p>\u5b89\u88c5\u65b9\u6cd5\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>apt install python3-setuptools python3-systemd -y # Debian\/Ubuntu \u7cfb\u5217\nyum install python3-setuptools python3-systemd -y # RHEL\/CentOS\/openEuler \u7cfb\u5217\ntar xvfj fail2ban-master.tar.bz2\ncd fail2ban-master\nsudo python setup.py install<\/code><\/pre>\n\n\n\n<p>\u8bbe\u7f6e\u670d\u52a1\u81ea\u52a8\u542f\u52a8\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cp build\/fail2ban.service \/usr\/lib\/systemd\/system\/\nsystemctl start fail2ban\nsystemctl enable fail2ban<\/code><\/pre>\n\n\n\n<p>\u914d\u7f6e\uff0c\/etc\/fail2ban\/jail.local: (\u4f9d\u636ejail.conf\u63d0\u70bc\u51fa\u6765\u7684)<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&#091;INCLUDES]\nbefore = paths-debian.conf\n&#091;DEFAULT]\nignoreself = true\nignoreip = 127.0.0.1\/8 ::1\nignorecommand =\nbantime  = 10m\nfindtime  = 10m\nmaxretry = 5\nmaxmatches = %(maxretry)s\nbackend = auto\nusedns = warn\nlogencoding = auto\nenabled = false\nmode = normal\nfilter = %(__name__)s&#091;mode=%(mode)s]\ndestemail = root@localhost\nsender = root@&lt;fq-hostname&gt;\nmta = sendmail\nprotocol = tcp\nchain = &lt;known\/chain&gt;\nport = 0:65535\nfail2ban_agent = Fail2Ban\/%(fail2ban_version)s\nbanaction = iptables-multiport\nbanaction_allports = iptables-allports\naction_ = %(banaction)s&#091;port=\"%(port)s\", protocol=\"%(protocol)s\", chain=\"%(chain)s\"]\naction_mw = %(action_)s\n            %(mta)s-whois&#091;sender=\"%(sender)s\", dest=\"%(destemail)s\", protocol=\"%(protocol)s\", chain=\"%(chain)s\"]\naction_mwl = %(action_)s\n             %(mta)s-whois-lines&#091;sender=\"%(sender)s\", dest=\"%(destemail)s\", logpath=\"%(logpath)s\", chain=\"%(chain)s\"]\naction_xarf = %(action_)s\n             xarf-login-attack&#091;service=%(__name__)s, sender=\"%(sender)s\", logpath=\"%(logpath)s\", port=\"%(port)s\"]\naction_cf_mwl = cloudflare&#091;cfuser=\"%(cfemail)s\", cftoken=\"%(cfapikey)s\"]\n                %(mta)s-whois-lines&#091;sender=\"%(sender)s\", dest=\"%(destemail)s\", logpath=\"%(logpath)s\", chain=\"%(chain)s\"]\naction_blocklist_de  = blocklist_de&#091;email=\"%(sender)s\", service=\"%(__name__)s\", apikey=\"%(blocklist_de_apikey)s\", agent=\"%(fail2ban_agent)s\"]\naction_abuseipdb = abuseipdb\naction = %(action_)s\n&#091;sshd]\nenabled = true\nmode   = aggressive\nport    = ssh\nlogpath = %(sshd_log)s\nbackend = %(sshd_backend)s<\/code><\/pre>\n\n\n\n<p>\u67e5\u770b\u88ab\u5c01\u7684IP\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>fail2ban-client get sshd banned<\/code><\/pre>\n\n\n\n<p>\u62a5\u9519\uff1aERROR&nbsp;&nbsp;&nbsp;Failed during configuration: Have not found any log file for sshd jail<\/p>\n\n\n\n<p>\u539f\u56e0\uff1a\u6ca1\u6709\u53d1\u73b0\/var\/log\/auth.log<\/p>\n\n\n\n<p>\u68c0\u67e5\uff1arsyslog\u6709\u6ca1\u6709\u5b89\u88c5systemctl status rsyslog<\/p>\n\n\n\n<p>\u6ca1\u6709\u5b89\u88c5\u5219\u9700\u8981\u5b89\u88c5\uff1aapt-get install rsyslog<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<p>\u62a5\u9519\uff1aModuleNotFoundError: No module named &#8216;fail2ban&#8217;<\/p>\n\n\n\n<p>\u73b0\u8c61\uff1aopeneuler\u7cfb\u7edf\u4e2d\uff0c\u5355\u6b65\u6267\u884c\/usr\/local\/bin\/fail2ban-server -xf start \u6b63\u5e38\u542f\u52a8\uff0c\u800c\u901a\u8fc7\/usr\/lib\/systemd\/system\/fail2ban.service\u542f\u52a8\u5931\u8d25<\/p>\n\n\n\n<p>\u68c0\u67e5\uff1a\/usr\/lib\/systemd\/system\/fail2ban.service\u91cc\u662f\u5426\u6709Environment=&#8221;PYTHONNOUSERSITE=1&#8243;<\/p>\n\n\n\n<p>\u5c1d\u8bd5\uff1a\u6ce8\u91caEnvironment=&#8221;PYTHONNOUSERSITE=1&#8243;\uff0c\u770b\u770b\u662f\u5426\u542f\u52a8\u6210\u529f\uff0c\u4e00\u822c\u6765\u8bf4\u662f\u53ef\u4ee5\u7684\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e0b\u8f7d\u5730\u5740\uff1ahttps:\/\/github.com\/fail2ban\/fail2ban\/archive\/refs\/tags\/1.1.0.tar.gz \u5b89\u88c5\u65b9\u6cd5\uff1a \u8bbe\u7f6e\u670d\u52a1\u81ea\u52a8\u542f\u52a8\uff1a \u914d\u7f6e\uff0c\/etc\/fail2ban\/jail.local: (\u4f9d\u636ejail.conf\u63d0\u70bc\u51fa\u6765\u7684) \u67e5\u770b\u88ab\u5c01\u7684IP\uff1a \u62a5\u9519\uff1aERROR&nbsp;&nbsp;&nbsp;Failed during configuration: Have not found any log file for sshd jail \u539f\u56e0\uff1a\u6ca1\u6709\u53d1\u73b0\/var\/log\/auth.log \u68c0\u67e5\uff1arsyslog\u6709\u6ca1\u6709\u5b89\u88c5systemctl status rsyslog \u6ca1\u6709\u5b89\u88c5\u5219\u9700\u8981\u5b89\u88c5\uff1aapt-get install rsyslog \u62a5\u9519\uff1aModuleNotFoundError: No module named &#8216;fail2ban&#8217; \u73b0\u8c61\uff1aopeneuler\u7cfb\u7edf\u4e2d\uff0c\u5355\u6b65\u6267\u884c\/usr\/local\/bin\/fail2ban-server -xf start \u6b63\u5e38\u542f\u52a8\uff0c\u800c\u901a\u8fc7\/usr\/lib\/systemd\/system\/fail2ban.service\u542f\u52a8\u5931\u8d25 \u68c0\u67e5\uff1a\/usr\/lib\/systemd\/system\/fail2ban.service\u91cc\u662f\u5426\u6709Environment=&#8221;PYTHONNOUSERSITE=1&#8243; \u5c1d\u8bd5\uff1a\u6ce8\u91caEnvironment=&#8221;PYTHONNOUSERSITE=1&#8243;\uff0c\u770b\u770b\u662f\u5426\u542f\u52a8\u6210\u529f\uff0c\u4e00\u822c\u6765\u8bf4\u662f\u53ef\u4ee5\u7684\u3002<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-437","post","type-post","status-publish","format-standard","hentry","category-9"],"_links":{"self":[{"href":"https:\/\/opshub.com.cn\/index.php?rest_route=\/wp\/v2\/posts\/437","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/opshub.com.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/opshub.com.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/opshub.com.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/opshub.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=437"}],"version-history":[{"count":2,"href":"https:\/\/opshub.com.cn\/index.php?rest_route=\/wp\/v2\/posts\/437\/revisions"}],"predecessor-version":[{"id":615,"href":"https:\/\/opshub.com.cn\/index.php?rest_route=\/wp\/v2\/posts\/437\/revisions\/615"}],"wp:attachment":[{"href":"https:\/\/opshub.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=437"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/opshub.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=437"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/opshub.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=437"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}