#RedHat/Fedora Core分析该日志文件#其它版本linux根据denyhosts.cfg-dist内提示选择。PURGE_DENY = 30m#过多久后清除DENY_THRESHOLD_INVALID = 1#允许无效用户(/etc/passwd未列出)登录失败的次数DENY_THRESHOLD_VALID = 5#允许有效(普通)用户登录失败的次数DENY_THRESHOLD_ROOT = 3#允许root登录失败的次数HOSTNAME_LOOKUP=NO#是否做域名反解
如果想让该服务能开机自启动可以在/etc/rc.local文件下增加/usr/share/denyhosts/daemon-control start
这样DenyHosts就安装好了,您可以通过查看/etc/hosts.deny文件来查看受攻击的记录
当然也可以自己写一个shell脚本做上面的事情。脚本如下:
#!/bin/bash
cd /usr/local/src
wget http://jaist.dl.sourceforge.net/sourceforge/denyhosts/DenyHosts-2.6.tar.gz
tar zxf DenyHosts-2.6.tar.gz
cd DenyHosts-2.6
python setup.py install
cd /usr/share/denyhosts/
cp daemon-control-dist daemon-control
chown root daemon-control
chmod 700 daemon-control
grep -v "^#" denyhosts.cfg-dist > denyhosts.cfg
echo "/usr/share/denyhosts/daemon-control start" >>/etc/rc.local
cd /etc/init.d
ln -s /usr/share/denyhosts/daemon-control denyhosts
chkconfig --add denyhosts
chkconfig --level 345 denyhosts on
service denyhosts start
然后执行该脚本,可以自动完成安装