49 lines
1.8 KiB
Plaintext
Executable File
49 lines
1.8 KiB
Plaintext
Executable File
echo "Changing ssh port..."
|
|
eval chroot /rootfs /usr/bin/sed -i -e 's/#Port 22/Port 2122/g' /etc/ssh/sshd_config 2>&1 | output_filter
|
|
if [ "${PIPESTATUS[0]}" -eq 0 ]; then
|
|
echo "OK"
|
|
else
|
|
echo "FAILED !"
|
|
fi
|
|
|
|
echo "Restarting ssh daemon..."
|
|
eval chroot /rootfs /user/bin/systemctl restart ssh 2>&1 | output_filter
|
|
if [ "${PIPESTATUS[0]}" -eq 0 ]; then
|
|
echo "OK"
|
|
else
|
|
echo "FAILED !"
|
|
fi
|
|
|
|
echo "Ensure fail2ban service is enabled..."
|
|
eval chroot /rootfs /user/bin/systemctl enable fail2ban 2>&1 | output_filter
|
|
if [ "${PIPESTATUS[0]}" -eq 0 ]; then
|
|
echo "OK"
|
|
else
|
|
echo "FAILED !"
|
|
fi
|
|
|
|
echo "Configure fail2ban ssh jail..."
|
|
eval chroot /rootfs /user/bin/touch /etc/fail2ban/jail.local 2>&1 | output_filter
|
|
eval chroot /rootfs /user/bin/echo '[ssh]' >> /etc/fail2ban/jail.local 2>&1 | output_filter
|
|
eval chroot /rootfs /user/bin/echo 'enabled=true' >> /etc/fail2ban/jail.local 2>&1 | output_filter
|
|
eval chroot /rootfs /user/bin/echo 'port=2122' >> /etc/fail2ban/jail.local 2>&1 | output_filter
|
|
eval chroot /rootfs /user/bin/echo 'filter=sshd' >> /etc/fail2ban/jail.local 2>&1 | output_filter
|
|
eval chroot /rootfs /user/bin/echo 'logpath=/var/log/auth.log' >> /etc/fail2ban/jail.local 2>&1 | output_filter
|
|
eval chroot /rootfs /user/bin/echo 'bantime=1800' >> /etc/fail2ban/jail.local 2>&1 | output_filter
|
|
eval chroot /rootfs /user/bin/echo 'banaction=iptables-allports' >> /etc/fail2ban/jail.local 2>&1 | output_filter
|
|
eval chroot /rootfs /user/bin/echo 'findtime=900' >> /etc/fail2ban/jail.local 2>&1 | output_filter
|
|
eval chroot /rootfs /user/bin/echo 'maxretry=3' >> /etc/fail2ban/jail.local 2>&1 | output_filter
|
|
if [ "${PIPESTATUS[0]}" -eq 0 ]; then
|
|
echo "OK"
|
|
else
|
|
echo "FAILED !"
|
|
fi
|
|
|
|
echo "Restart fail2ban service..."
|
|
eval chroot /rootfs /user/bin/systemctl restart fail2ban 2>&1 | output_filter
|
|
if [ "${PIPESTATUS[0]}" -eq 0 ]; then
|
|
echo "OK"
|
|
else
|
|
echo "FAILED !"
|
|
fi
|