Block SSH password attempt tool software

Fail2ban can use the system's own firewall, such as Linux iptables or FreeBSD ipfw, you can also use tcpd, in addition to other network services, I mainly use monitoring port 22, and /var/Log/secure logs, mainly those that are illegally accessed. When an IP is found to fail for a defined number of times within a defined period of time, the iptables of LINUX are used to prevent IP from being changed for a defined period of time. Of course, it can also be blocked indefinitely. Download the address http://fail2ban.sourceforge.net/, select the version suitable for your operating system download in download, I chose the REDHAT version, the software under the system is not some other version high, but it does not matter, it has fully satisfied with our demand. Download fail2ban-0.6.2-1brn.src.rpm, because the 0.6.1 version has time to judge the BUG, ​​and use the source code to recompile can be more compatible with the actual system environment, to achieve the best performance, so... Select the source code package for this version. Rpmbuild --rebuild fail2ban-0.6.2-1brn.src.rpm From the build log you can see that the compiled RPM is in /usr/src/redhat/RPMS/noarch/fail2ban-0.6.2-1brn.noarch.rpm rpm - Uvh /usr/src/redhat/RPMS/noarch/fail2ban-0.6.2-1brn.noarch.rpm The executable file is already in /etc/init.d/fail2ban and can be used as a service with service fail2ban {start