DenyHosts(防SSH破解) - 安全相关

#Github
	https://github.com/denyhosts/denyhosts

---
#下载安装
	wget https://github.com/denyhosts/denyhosts/archive/refs/tags/v2.10.tar.gz
	tar -zxvf denyhosts-2.10.tar.gz
	cd denyhosts-2.10
	python setup.py install
	#这会将 DenyHosts 模块安装到 python 的包目录中
---
#修改配置
	cp denyhosts.conf /etc

##配置文件的重要说明

vim /etc/denyhosts.conf
	#内容：（根据系统开启注释，跟关闭注释，默认室debian系统配置）
	# Redhat or Fedora Core:
	SECURE_LOG = /var/log/secure
	#
	# Mandrake, FreeBSD or OpenBSD: 
	#SECURE_LOG = /var/log/auth.log
	#
	# SuSE or Gentoo:
	#SECURE_LOG = /var/log/messages
	#
	# Mac OS X (v10.4 or greater - 
	#   also refer to:   http://www.denyhost.net/faq.html#macos
	#SECURE_LOG = /private/var/log/asl.log
	#
	# Mac OS X (v10.3 or earlier):
	#SECURE_LOG=/private/var/log/system.log
	#
	# Debian and Ubuntu
	#SECURE_LOG = /var/log/auth.log
	=====================================================
	# Redhat/Fedora:
	LOCK_FILE = /var/lock/subsys/denyhosts
	#
	# Debian or Gentoo
	#LOCK_FILE = /var/run/denyhosts.pid
	=====================================================
	#当一个IP被阻止以后，1分钟后被自动解禁
	PURGE_DENY = 24h
	DAEMON_PURGE = 24h
	#IP最多被解封多少次
	PURGE_THRESHOLD = 3
	#root用户尝试登录多少次后被阻止
	DENY_THRESHOLD_ROOT = 3
	#注释，关闭添加iptables规则
	#IPTABLES = /sbin/iptables
	======================================================

###注意：根据系统开启注释，跟关闭注释，默认室debian系统配置

---
#运行
	./denyhosts.py --daemon --config=/etc/denyhosts.conf

---
#日志
	tail -f /var/log/denyhosts