Kwidziridza chengetedzo paGNU / Linux

Sawa shamwari kubva DesdeLinux, chakavimbiswa chikwereti uye heino chinyorwa pamusoro maitiro ekuwedzera kuchengetedza kweLinux masisitimu mugare makadaro safe kubva kune vapambi kuwedzera mukuchengetedza iyo ruzivo pane yako maseva, PC's kana malaptop !!!!

Comenzando

Fail2ban: chishandiso chakanyorwa muPython kudzivirira kupindirwa muchirongwa, icho chinoita nekuranga kana kuvharira kure kwokubatana kunoedza kushaya simba kuwana.

Kuisa:

Fedora, RHEL, CentOS:

yum install fail2ban

Debian, Ubuntu:

apt-get install fail2ban

Kuisa:

cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local nano /etc/fail2ban/jail.local

Muchikamu chinonzi [DEFAULT] isu hatigadzikane uye tinoshandura #bantime = 3600 tichiisiya yakadaro:

#bantime = 3600 bantime = 604800

Muchikamu che [sshd] isu tinosuma chakagoneswa = ichokwadi uchichisiya chakadai.

#enabled = ichokwadi inogoneswa = ichokwadi

Isu tinochengetedza neCTRL + O uye kuvhara neCTRL + X

Isu tinotanga sevhisi:

Fedora, RHEL, CentOS:

systemctl inogonesa kukundikana2service systemctl kutanga kutadza2ban.service

Debian, Ubuntu:

sevhisi ikundikana2b kutanga

Ramba mukana wekushandisa uchishandisa ssh:

Kuchengetedza muchina wedu tiri kuzoramba ssh kuburikidza nemudzi mushandisi. Kuti tiite izvi, isu tinogadzirisa iyo / etc / ssh / sshd_config faira seinotevera:

cp sshd_config sshd_config.bck nano / etc / ssh / sshd_config

Hatina kugadzikana uye tinoshanduka

#Protocol 2 Protocol 2

Hatina kugadzikana uye tinoshanduka

#PermitRootLogin hongu PermitRootLogin kwete

Isu tinochengetedza neCTRL + O uye kuvhara neCTRL + X

Isu tinotanga sevhisi:

Fedora, RHEL, CentOS:

systemctl inogonesa sshd.service systemctl kutanga sshd.service

Debian, Ubuntu:

sevhisi sshd kutanga

Ramba kupinda kune ssh server uchishandisa kiyi uye bvumira ssh chete neRSA makiyi

Kana isu tichida kubatana nePC1 kuServer1 chinhu chekutanga chatinofanira kuita kugadzira kiyi yedu paPC1. Tiine mushandisi uye tisina mudzi paPC1 isu tinoita:

ssh-keygen -t rsa -b 8192 (izvi zvinogadzira inopfuura yakachengeteka kiyi sezvo makiyi kubva 1024 kusvika 2048 anowanzo shandiswa)

Kana tangova nepassword, tinoiisa kuServer1:

ssh-kopi-id mushandisi @ server_ip

Kana izvi zvangoitwa, isu tichaenda kune yedu Server1 uye nekugadzirisa iyo nano / etc / ssh / sshd_config faira ine midzi mvumo:

ssh mushandisi @ Server1 nano / etc / ssh / sshd_config

Isu tinoshandura mutsara unoti #PasswordAuthentication hongu kune izvi:

#PasswordAuthentication hongu
Pasiwedhi Kusimbisa hapana

Isu tinochengetedza neCTRL + O uye kuvhara neCTRL + X

Isu tinotangazve iyo ssh sevhisi:

Fedora, RHEL, CentOS:

systemctl kutanga sshd.service

Debian, Ubuntu:

service sshd kutanga

Chinja ssh yekuteerera chiteshi

Zvekare isu tinogadzira / etc / ssh / sshd_config uye muchikamu chinongedzera kuchiteshi tinochisiya chakadai.

# Port 22 Port 2000 (kana chero imwe nhamba yakakura kupfuura 2000. Mune yedu mienzaniso isu tichashandisa izvi.)

Isu tinochengetedza neCTRL + O uye kuvhara neCTRL + X

Isu tinotangazve iyo ssh sevhisi:

Fedora, RHEL, CentOS:

systemctl kutanga sshd.service

Debian, Ubuntu:

service sshd kutanga

Kana vakashandisa fail2ban zvinofanirwa kushandura iyo marongero nezve sshd kugadzirisa chiteshi.

nano /etc/fail2ban/jail.local

[sshd]
port    = ssh, 2000

[sshd-ddos]
port    = ssh, 2000

[dropbear]
port    = ssh, 2000

[selinux-ssh]
port    = ssh, 2000

Isu tinochengetedza neCTRL + O uye kuvhara neCTRL + X

Isu tinovandudza sevhisi:

Fedora, RHEL, CentOS:

systemctl yekutanga rest2ban.service

Debian, Ubuntu:

sevhisi fail2ban restart

firewall

Fedora, RHEL, CentOS:

Selinux uye Iptable zvinogoneswa nekukasira pane aya masisitimu uye ini ndinokurudzira kuti iwe uenderere mberi nenzira iyi. / Ungavhura sei chiteshi ne iptables? Ngatione maitiro ekuvhura iyo nyowani chiteshi 2000 yeiyo ssh chiteshi yatakachinja kare

Vhura:

nano / etc / sysconfig / iptables

uye isu tinoshandura mutsetse uchinongedzera kune yakasarudzika ssh chiteshi 22 uye toisiya yakadaro:

# -A INPUT -m mamiriro --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 2000 -j Bvuma

Isu tinochengetedza neCTRL + O uye kuvhara neCTRL + X

Isu tinotangazve sevhisi:

systemctl kutangazve iptables

Debian, Ubuntu:

MuDebian kana Ubuntu uye zvigadzirwa tine UFW firewall iyo ichaita kuti hupenyu hwedu huve nyore sezvo ichikwanisa Netfilter nyore kwazvo.

Kuisa:

apt-tora kuisa ufw ufw inogonesa

Kuti uone chinzvimbo chemasuo akavhurika isu tinoita:

mamiriro ewww

Kuvhura chiteshi (mune yedu muenzaniso chichava chitsva ssh chiteshi 2000):

ufw inobvumira 2000

Kuramba chiteshi (kwatiri ichave iri default port 22 ye ssh):

ufw kuramba 22 ufw bvisa kuramba 22

Uye shamwari dzakagadzirira. Nenzira iyi vanozochengetedza michina yako yakachengeteka. Usakanganwa kupindura uye kusvika nguva inotevera: D.