{"id":65,"date":"2021-01-02T11:01:17","date_gmt":"2021-01-02T02:01:17","guid":{"rendered":"https:\/\/www.spacek.xyz\/mle\/?p=65"},"modified":"2026-02-04T21:41:00","modified_gmt":"2026-02-04T12:41:00","slug":"%ec%9d%b4%ec%a0%9c-%ed%95%b4%ed%82%b9%ec%9d%80-%ea%b7%b8%eb%a7%8c","status":"publish","type":"post","link":"https:\/\/www.spacek.xyz\/mle\/?p=65","title":{"rendered":"\uc774\uc81c \ud574\ud0b9\uc740 \uadf8\ub9cc ~~~"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">log \ud30c\uc77c\uc744 \ubcf4\uba74 \uc815\ub9d0 \ube48\ubc88\ud558\uac8c \uc678\ubd80\uc5d0\uc11c \ub85c\uadf8\uc778\uc744 \uc2dc\ub3c4\ud558\uace0 \uc788\ub2e4.<br>\uadf8\ub807\ub2e4\uace0 \uc678\ubd80\ub85c \ubd80\ud130\uc758 \ubaa8\ub4e0 \uc811\uc18d\uc744 \ucc28\ub2e8\ud560 \uc218 \ub3c4 \uc5c6\ub2e4.<br>\uc774 \ucc38\uc5d0 log \ud30c\uc77c\uc5d0\uc11c \uc778\uc99d \uc2e4\ud328\ud55c \uc811\uc18d ip \ub97c \ubaa8\ub450 \ucc28\ub2e8\ud558\uae30\ub85c \uc791\uc815\ud558\uace0 \ud504\ub85c\uadf8\ub7a8\uc744 \uc791\uc131\ud558\ub824\uace0 ms code\ub97c \uc5f4\uc5c8\ub2e4\uac00 \ud639\uc2dc\ub098 \ud558\ub294 \ub9c8\uc74c\uc5d0 \uc544\ub798 \ud0a4\uc6cc\ub4dc\ub85c \uad6c\uae00\ub9c1\uc744 \ud574\ubcf4\uc558\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ubuntu auto block ip authentication failure smtp ssh<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc5ed\uc2dc\ub098 \uc774\ub7f0 \uc0dd\uac01\uc740 \ub098\ub9cc\uc774 \uc544\ub2c8\uc5c8\ub2e4. fail2ban \uc774\ub77c\ub294 \uc5b4\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc774\ubbf8 \uc788\ub2e4.<br>\ub354\uad6c\ub098 \uc124\uce58 \uc608\uc81c \uc0ac\uc774\ud2b8\ub85c \uc5c4\uccad \ub9ce\ub2e4. \uc124\uce58\ub3c4 \uc27d\uace0 \uc124\uc815\ub3c4 \uc27d\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&gt; sudo apt install fail2ban<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \ud55c\ubb38\uc7a5\uc73c\ub85c \ub05d\uc774\ub2e4. \uc124\uc815\uc740 \uad6c\uae00\ub9c1\ud558\uba74 \ub108\ubb34\ub098 \uc27d\uac8c \ub098\uc628\ub2e4. \uae30\ubcf8 \uc124\uc815\uc778 jail.conf \ub294 \uac74\ub4dc\ub9ac\uc9c0 \uc54a\uace0 jail.local \ub97c \ub9cc\ub4e4\uc5b4 \ub0b4\uac8c \ud544\uc694\ud55c \uc124\uc815\uc744 \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc544\ub798\ub294 \ub0b4\uac8c \ud544\uc694\ud55c smtp \uad00\ub828\ub41c \uc124\uc815\uacfc 80\uacfc 443\uc744 \uc5f4\uace0 \uc788\uc73c\ubbc0\ub85c \ud639\uc2dc\ub098 \ud574\uc11c \uc774 \uac83\ub3c4 \uac10\uc2dc \ub300\uc0c1\uc5d0 \ucd94\uac00\ud588\ub2e4. ssh, ftp, telnet \ub4f1\uc740 \uc678\ubd80\uc5d0 \uac1c\ubc29\ud558\uc9c0 \uc54a\uc558\uc73c\ubbc0\ub85c \uac10\uc2dc \ub300\uc0c1\uc5d0\uc11c \uc81c\uc678\ud558\uc600\ub2e4.<br>\uadf8\ub9ac\uace0 \ub108\ubb34 \ub9ce\uc740 \uac10\uc2dc \ub300\uc0c1\uc744 \ucd94\uac00\ud558\ub2c8 fail2ban \uc774 \uc2e4\ud589\ud558\ub294 \ub3c4\uc911\uc5d0 \uc815\uc9c0\ud558\ub294 \uc0c1\ud669\uc774 \ubc1c\uc0dd\ud55c\ub2e4. \uac10\uc2dc \ub300\uc0c1\uc774 \ub9ce\uc544\uc11c \uadf8\ub7f0\uc9c0 \uc544\ub2c8\uba74 \uc124\uc815\uc0c1 \ubb38\uc81c\uac00 \uc788\ub294\uc9c0\ub294 \ud655\uc778\ud558\uc9c0 \uc54a\uc558\ub2e4. \ub2e8\uc9c0, \ub0b4\uac8c \ud544\uc694\ud55c \uc124\uc815 \ub9cc\uc73c\ub85c \uc815\uc0c1 \ub3d9\uc791\ud558\uace0 \uc788\uae30 \ub54c\ubb38\uc774\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&#91;DEFAULT]\nbanaction=ufw\n\nbantime = -1\nfindtime = 6h\n\n&#91;roundcube-auth]\nenabled = true\n\n&#91;postfix]\nenabled = true\n\n&#91;postfix-rbl]\nenabled = true\n\n&#91;sendmail-auth]\nenabled = true\n\n&#91;apache-auth]\nenabled = true\n\n&#91;apache-badbots]\nenabled = true\n\n&#91;apache-noscript]\nenabled = true\n\n&#91;apache-overflows]\nenabled = true\n\n&#91;postfix-sasl]\nenabled = true<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><code>\"banaction=ufw\"<\/code> \ub294 \ubc29\ud654\ubcbd\uc744 <code>ufw<\/code>\ub97c \uc0ac\uc6a9\ud558\ub3c4\ub85d \uc124\uc815\ud55c \uac83\uc774\ub2e4. \uae30\ubcf8\uc774 <code>iptables <\/code>\uc774\ubbc0\ub85c <code>iptables<\/code>\ub97c \ubc29\ud654\ubcbd\uc73c\ub85c \uc0ac\uc6a9\ud558\uace0 \uc788\uc73c\uba74 \uc774 \uc904\uc740 \uc0ad\uc81c\ud558\uba74 \ub41c\ub2e4.<br><code>\"bantime=-1\"<\/code>\uc740 \ube14\ub85d\ud0b9\ud558\ub294 \uc2dc\uac04\uc744 \uc758\ubbf8\ud55c\ub2e4. -1 \uc740 \uc601\uc6d0\ud788 \ube14\ub85d\ud558\ub77c\ub294 \uc758\ubbf8\uc774\ub2e4.<br><code>\"findtime=6h\"<\/code> \ub294 6\uc2dc\uac04 \ub3d9\uc548 \uc778\uc99d\uc2e4\ud328\uac00 5\ud68c\uc774\uc0c1 \ubc1c\uc0dd\ud558\uba74 \ube14\ub85d\ub9ac\uc2a4\ud2b8\uc5d0 \ucd94\uac00\ud558\ub77c\ub294 \uc758\ubbf8\uc774\ub2e4.<br>\uc2e4\ud328\ud69f\uc218\ub294 <code>maxretry<\/code>\ub85c \uc124\uc815\ud560 \uc218 \uc788\ub2e4. \uae30\ubcf8\uc740 5 \ud68c\uc774\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e4\ub978 \ubd80\ubd84\uc740 \ub0b4\uac8c \ud544\uc694\ud55c \uc5b4\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0 \ub300\ud558\uc5ec \uac10\uc2dc\ud560 \uac83\uc778\uc9c0\ub97c \uc124\uc815\ud558\ub294 \uac83\uc774\ub2e4. \uac00\ub2a5\ud55c \uc5b4\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \uc885\ub958\ub294 jail.conf \uc5d0 \ub2e4 \ub4e4\uc5b4 \uc788\ub2e4. \uadf8 \ubaa9\ub85d\uc5d0\uc11c \ub0b4\uac8c \ud544\uc694\ud55c \uac83\ub9cc \uac00\uc838\uc640\uc11c jail.local \uc5d0 \uae30\ub85d\ud558\uace0 &#8220;<code>[app-name]<\/code> &#8221; \ub9cc \ub0a8\uae30\uace0 \ub2e4\ub978 \uc124\uc815\uc740 \uc0ad\uc81c\ud55c \ud6c4\uc5d0 <code>\"enabled = true\"<\/code> \ub9cc \ucd94\uac00\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc7a0\uae50 \uc0ac\uc774\uc5d0 \uc544\ub798\uc640 \uac19\uc774 \ube14\ub85d\ub418\ub294 IP \uac00 \ub098\ud0c0\ub09c\ub2e4. ^^<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>root@mail:\/etc\/fail2ban# fail2ban-client status postfix-sasl\nStatus for the jail: postfix-sasl\n|- Filter\n|  |- Currently failed: 0\n|  |- Total failed:     10\n|  `- File list:        \/var\/log\/mail.log\n`- Actions\n   |- Currently banned: 3\n   |- Total banned:     3\n   `- Banned IP list:   45.142.120.84 212.70.149.54 45.142.120.87\nroot@mail:\/etc\/fail2ban#\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><code>auth.log<\/code> \ub97c \ubcf4\uba74 \ub354\uc774\uc0c1 \uc778\uc99d \uc2e4\ud328 \ub85c\uadf8\uac00 \ub098\ud0c0\ub098\uc9c0 \uc54a\ub294\ub2e4. ^^<br>\uc774\uc81c \ud574\ud0b9\uc73c\ub85c \ubd80\ud130 \uc870\uae08\uc740 \ub354 \uc548\uc804\ud55c \uc0ac\uc774\ud2b8\uac00 \ub41c \uac83 \uac19\ub2e4. \u314e\u314e<\/p>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\uc8fc1) fail2ban\uc744 \uc2e4\ud589 \ud560 \ub54c &#8220;roundcube-auth&#8221; \uc5d0\uc11c \uacc4\uc18d \uc2e4\ud328\ub97c \ud55c\ub2e4. \ub85c\uadf8\ub97c \ubcf4\ub2c8 roundcube \ub85c\uadf8 \ud30c\uc77c\uc744 \ucc3e\uc744 \uc218 \uc5c6\ub2e4\uace0 \uba54\uc2dc\uc9c0\uac00 \ud45c\uc2dc\ub41c\ub2e4. <br>&#8220;logpath = %(roundcube_errors_log)s&#8221; \uc5d0 \ud574\ub2f9\ud558\ub294 \uc815\uc758\ub97c paths-debian.conf \uc5d0\uc11c \ucc3e\uc544 \ubcf4\ub2c8 \uc815\uc758\uac00 \uc5c6\ub2e4. \uadf8\ub798\uc11c \uc544\ub798\uc640 \uac19\uc774 \ucd94\uac00\ud558\uace0 \ub2e4\uc2dc \uc2e4\ud589\ud558\ub2c8 \uc815\uc0c1\uc801\uc73c\ub85c \uc798 \ub3d9\uc791\ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">roundcube_errors_log = \/var\/log\/roundcube\/errors.log<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ub807\uac8c \ucca0\uc800\ud558\uac8c \ubc29\uc5b4\ud558\ub2e4 \ubcf4\ub2c8 \uc544\ucc28 \uc2e4\uc218\ud558\uba74 \ub098\ub3c4 \ucc28\ub2e8\ub418\uace0 \ub9cc\ub2e4. \uc774\ub807\uac8c \ub0b4\uac00 \ucc28\ub2e8\ub41c \uacbd\uc6b0\uc5d0 \ub098\ub97c \ub2e4\uc2dc \ud574\uc81c\ud558\ub294 \ubc29\ubc95\uc774 \ud544\uc694\ud558\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e4\uc74c\uacfc \uac19\uc774 \ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>fail2ban-client set &lt;sshd:jail name&gt; unbanip &lt;ip address list&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc704\uc5d0\uc11c jail name\uc740 sshd, roundcube-auth \ub4f1\uacfc \uac19\uc774 \ud658\uc131\ud30c\uc77c\uc5d0\uc11c \uc124\uc815\ud55c jail\uc758 \uc774\ub984\uc774\ub2e4. \ub9c8\uc9c0\ub9c9\uc5d0 \ubd99\ub294  ip address list \ub294 jail\uc5d0\uc11c \ud574\uc81c\ud558\uae30 \uc704\ud55c ip address \ub97c \uacf5\ubc31\uc744 \uad6c\ubd84\uc790\ub85c \ud558\uc5ec \uc9c0\uc815\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uac00\ub054\uc740 fail2ban \uc774 ufw \uc5d0 \ucc28\ub2e8\uc744 \uac78\uc5b4 \ubc84\ub9ac\ub294 \uacbd\uc6b0\uac00 \uc788\ub2e4. \uc774\ub54c\ub294 ufw \uc5d0 \ub4f1\ub85d\ub41c rejected ip \ub97c \uc0ad\uc81c\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw delete reject from xxx.xxx.xxx.xxx<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>log \ud30c\uc77c\uc744 \ubcf4\uba74 \uc815\ub9d0 \ube48\ubc88\ud558\uac8c \uc678\ubd80\uc5d0\uc11c \ub85c\uadf8\uc778\uc744 \uc2dc\ub3c4\ud558\uace0 \uc788\ub2e4.\uadf8\ub807\ub2e4\uace0 \uc678\ubd80\ub85c \ubd80\ud130\uc758 \ubaa8\ub4e0 \uc811\uc18d\uc744 \ucc28\ub2e8\ud560 \uc218 \ub3c4 \uc5c6\ub2e4.\uc774 \ucc38\uc5d0 log \ud30c\uc77c\uc5d0\uc11c \uc778\uc99d \uc2e4\ud328\ud55c \uc811\uc18d ip \ub97c \ubaa8\ub450 \ucc28\ub2e8\ud558\uae30\ub85c \uc791\uc815\ud558\uace0 \ud504\ub85c\uadf8\ub7a8\uc744 \uc791\uc131\ud558\ub824\uace0 ms code\ub97c \uc5f4\uc5c8\ub2e4\uac00 \ud639\uc2dc\ub098 \ud558\ub294 \ub9c8\uc74c\uc5d0 \uc544\ub798 \ud0a4\uc6cc\ub4dc\ub85c \uad6c\uae00\ub9c1\uc744 \ud574\ubcf4\uc558\ub2e4. &hellip; <a href=\"https:\/\/www.spacek.xyz\/mle\/?p=65\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[19,20],"class_list":["post-65","post","type-post","status-publish","format-standard","hentry","category-6","tag-gail2ban","tag-ip-block"],"views":687,"_links":{"self":[{"href":"https:\/\/www.spacek.xyz\/mle\/index.php?rest_route=\/wp\/v2\/posts\/65","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.spacek.xyz\/mle\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.spacek.xyz\/mle\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.spacek.xyz\/mle\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.spacek.xyz\/mle\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=65"}],"version-history":[{"count":7,"href":"https:\/\/www.spacek.xyz\/mle\/index.php?rest_route=\/wp\/v2\/posts\/65\/revisions"}],"predecessor-version":[{"id":256,"href":"https:\/\/www.spacek.xyz\/mle\/index.php?rest_route=\/wp\/v2\/posts\/65\/revisions\/256"}],"wp:attachment":[{"href":"https:\/\/www.spacek.xyz\/mle\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=65"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.spacek.xyz\/mle\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=65"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.spacek.xyz\/mle\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=65"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}