![Apache 的 fail2ban 设置](https://linux22.com/image/573807/Apache%20%E7%9A%84%20fail2ban%20%E8%AE%BE%E7%BD%AE.png)
基本上,目前我们的服务器设置得太安全了,fail2ban 会禁止只是浏览网站的用户,即使只是缺少一张图片。
我需要禁用以下哪个 apache 设置来阻止这种情况发生:
[apache]
enabled = true
port = http,https
filter = apache-auth
action = iptables[name=httpd, port=http, protocol=tcp]
sendmail-whois[name=httpd, dest="%(destemail)s", [email protected]]
logpath = /var/log/apache*/*error.log
maxretry = 3
[apache-ssl]
enabled = true
port = http,https
filter = apache-auth
action = iptables[name=httpd, port=https, protocol=tcp]
sendmail-whois[name=httpd, dest="%(destemail)s", [email protected]]
logpath = /var/log/apache*/*error.log
maxretry = 3
[apache-multiport]
enabled = true
port = http,https
filter = apache-auth
action = iptables[name=httpd, port=http, protocol=tcp]
logpath = /var/log/apache*/*error.log
maxretry = 3
[apache-noscript]
enabled = true
port = http,https
filter = apache-noscript
action = iptables[name=httpd, port=http, protocol=tcp]
sendmail-whois[name=httpd, dest="%(destemail)s", [email protected]]
logpath = /var/log/apache*/*error.log
maxretry = 20
bantime = 300 #5mins
[apache-noscript-ssl]
enabled = true
port = http,https
filter = apache-noscript
action = iptables[name=httpd, port=https, protocol=tcp]
sendmail-whois[name=httpd, dest="%(destemail)s", [email protected]]
logpath = /var/log/apache*/*error.log
maxretry = 20
bantime = 300 #5mins
[apache-overflows]
enabled = true
port = http,https
filter = apache-overflows
action = iptables[name=httpd, port=http, protocol=tcp]
sendmail-whois[name=httpd, dest="%(destemail)s", [email protected]]
logpath = /var/log/apache*/*error.log
maxretry = 3
[apache-overflows-ssl]
enabled = true
port = http,https
filter = apache-overflows
action = iptables[name=httpd, port=https, protocol=tcp]
sendmail-whois[name=httpd, dest="%(destemail)s", [email protected]]
logpath = /var/log/apache*/*error.log
maxretry = 3
答案1
检查 fail2ban 日志以了解禁止用户的原因。