You are on page 1of 1

***** Setup Firewalld & Fail2ban *****

# yum install -y firewalld; yum install -y epel-release; yum install -y fail2ban;


yum install -y bash-completion; exec bash
# mkdir -p /aruba/backup-conf/firewalld
# cp -p /etc/firewalld/firewalld.conf /aruba/backup-
conf/firewalld/firewalld.conf.20210621

# vim /etc/firewalld/firewalld.conf
DefaultZone=trusted
...

# vim /etc/fail2ban/jail.d/sshd.conf
[DEFAULT]
#Durata del ban
bantime = 3600
#Timeout tentativi
findtime = 600
#Massimo numero di tentativi consentito nel tempo findtime
maxretry = 10

# Override /etc/fail2ban/jail.d/00-firewalld.conf:
banaction = iptables-multiport

[sshd]
enabled = true

***** Abilitazoine & Attivazione Firewalld & Fail2ban *****


# systemctl enable --now firewalld; systemctl enable --now fail2ban;
# systemctl status firewalld; systemctl status fail2ban; fail2ban-client status

***** Verifiche firewalld & NetworkManager *****


# grep -i ONBOOT /etc/sysconfig/network-scripts/ifcfg-e*
# systemctl status NetworkManager; systemctl is-enabled NetworkManager
# firewall-cmnd --get-default-zone
# firewall-cmd --get-active-zones

- Se le interfaccie non sono presenti aggiungerle


# ip a
# firewall-cmd --add-interface <nome_interfaccia>

- Verifica
# firewall-cmd --get-active-zone

Ripartire da P-FEIMGPROCE

You might also like