2019-09-24 08:53:00 +08:00
|
|
|
|
# denyhosts
|
2022-07-08 09:16:58 +08:00
|
|
|
|
ssh防止暴力破解,适用Debian 8、9、11 Centos 7
|
|
|
|
|
|
支持钉钉告警和邮件告警
|
|
|
|
|
|
支持第三方QQ邮箱告警
|
|
|
|
|
|
支持一次运行检测、后台运行检测
|
2022-09-29 14:13:07 +08:00
|
|
|
|
|
|
|
|
|
|
```
|
2022-08-06 11:48:21 +08:00
|
|
|
|
Debian系统请安装libcurl库和libiptc库
|
2022-09-29 14:13:07 +08:00
|
|
|
|
apt install libip4tc-dev libcurl4-openssl-dev (或者libcurl4-gnutls-dev)
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
|
Centos 7系统请安装libcurl库和iptables-devel库
|
|
|
|
|
|
yum install iptables-devel libcurl-devel
|
|
|
|
|
|
```
|
2017-11-25 20:14:11 +08:00
|
|
|
|
|
|
|
|
|
|
|
2022-07-08 09:16:58 +08:00
|
|
|
|
```
|
2019-10-22 23:08:05 +08:00
|
|
|
|
cd /root
|
2022-07-08 09:16:58 +08:00
|
|
|
|
git clone https://git.aixiao.me/aixiao/denyhosts
|
2019-10-22 23:11:56 +08:00
|
|
|
|
cd denyhosts
|
|
|
|
|
|
make clean; make
|
2019-10-22 23:09:45 +08:00
|
|
|
|
chmod a+x /root/denyhosts/denyhosts.sh
|
2021-07-11 10:10:55 +08:00
|
|
|
|
|
2019-10-22 23:09:45 +08:00
|
|
|
|
crontab 定时任务,像这样.
|
|
|
|
|
|
0 22 * * * /root/denyhosts/denyhosts.sh
|
2022-07-08 09:16:58 +08:00
|
|
|
|
```
|
2019-09-24 08:53:00 +08:00
|
|
|
|
|
2022-06-26 19:49:00 +08:00
|
|
|
|
|
2022-07-08 09:16:58 +08:00
|
|
|
|
```
|
2022-08-06 11:48:21 +08:00
|
|
|
|
Debian系统使用libiptc库需要nftables切换到iptables
|
2022-07-08 09:16:58 +08:00
|
|
|
|
Switching to the legacy version:(切换到 iptables)
|
2022-06-26 19:49:00 +08:00
|
|
|
|
|
2022-07-08 09:16:58 +08:00
|
|
|
|
update-alternatives --set iptables /usr/sbin/iptables-legacy
|
|
|
|
|
|
update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy
|
|
|
|
|
|
update-alternatives --set arptables /usr/sbin/arptables-legacy
|
|
|
|
|
|
update-alternatives --set ebtables /usr/sbin/ebtables-legacy
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
|
配置文件
|
|
|
|
|
|
global {
|
|
|
|
|
|
DAEMON = "off"; // on开启后台运行，off不开启
|
|
|
|
|
|
TIME = "60"; // 睡眠时间（单位秒，大于等于1）
|
|
|
|
|
|
|
|
|
|
|
|
REFUSE_NUMBER = 5; // 拒绝攻击次数（大于等于1）
|
|
|
|
|
|
|
|
|
|
|
|
IS_MAIL = 0; // 开启邮件告警（0关闭，1开启）
|
|
|
|
|
|
|
|
|
|
|
|
IS_DING_WEBHOOK = 1; // 开启叮叮告警（0关闭，1开启）
|
|
|
|
|
|
PHONE = "15565979082"; // @的人手机号
|
|
|
|
|
|
DING_WEBHOOK = "https://oapi.dingtalk.com/robot/send?access_token=7f069c672cb878987aa6772cca336740eece4ce36bde12b51b45e9f440e0565a"; // 钉钉WEBHOOK
|
|
|
|
|
|
|
|
|
|
|
|
IS_QQMAIL = 0; // 开启QQ邮箱告警（0关闭，1开启）
|
|
|
|
|
|
RECV_MAIL = "1605227279"; // 接收者QQ
|
|
|
|
|
|
}
|
2022-07-13 11:27:22 +08:00
|
|
|
|
```
|
