1. Beranda
2. Virtual Private Server

Memasang Fail2Ban untuk Mengamankan SSH Server

Sebagai pemilik server, sudah suatu kewajiban kita untuk melindungi server kita. Salah satunya dari orang yang coba-coba untuk mengakses server kita. Umumnya cara ini menggunakan brute force login pada jalur komunikasi SSH.

Salah satu solusi yang sering dilakukan adalah mengganti port SSH. Bisa dikatakan, tindakan ini merupakan passive defense, yang berarti hanya menahan serangan secara sementara. Pada akhirnya dengan scanning port, penyerang tentu akan tahu port SSH server kita. Alangkah baiknya jika tindakan ini ditambahkan sebuah active defense, yakni sistem pertahanan yang bereaksi secara aktif menghadapi kemungkinan serangan. Dalam hal ini kita membicarakan Fail2Ban.

Apa itu Fail2Ban?

Menurut Wikipedia, Fail2Ban adalah sebuah aplikasi pencegah intrusi atau akses tak sah yang melindungi komputer/server dari serangan brute-force. Fail2Ban ditulis dengan menggunakan bahasa pemrograman Python, sehingga dapat berjalan di sistem POSIX yang memiliki antarmuka pengontrol paket data atau firewall yang terpasang secara lokal, misalnya iptables atau TCP Wrapper. Fail2Ban bekerja dengan membaca log dari sebuah program yang disetel untuk diawasi. Dalam hal ini tentu saja SSH server.

Sebagai permulaan, kita harus melakukan instalasi Fail2Ban. Untuk perintah di Debian, Ubuntu dan turunannya adalah sebagai berikut:

# apt install fail2ban

Sedangkan untuk di CentOS dan turunannya adalah sebagai berikut:

# yum install epel-release
# yum install fail2ban

Untuk baris pertama, kita memasang repository enterprise karena fail2ban tidak ada dalam paket standar CentOS. Setelah perintah-perintah selesai dijalankan, saatnya untuk melakukan konfigurasi setelan pada Fail2Ban. Jalankan perintah untuk melakukan editing pada file jail.conf yang ada di direktori /etc/fail2ban. Perintahnya bisa disesuaikan dengan editor yang anda gunakan.

# cd /etc/fail2ban
# cp jail.conf jail.conf.backup
# nano /etc/fail2ban/jail.conf

Baris pertama untuk masuk ke direktori konfigurasi Fail2Ban. Baris kedua untuk melakukan backup copy file jail.conf, siapa tahu salah edit. Setelah itu menggunakan editor nano untuk buka file jail.conf. Anda bisa menyesuikan dengan editor yang anda pakai. Setelah itu cari directive [sshd], tambahkan baris “enabled = true” seperti gambar di sebelah kanan. Setelah itu simpan dan restart Fail2Ban. Kali ini kedua jalur distro, yakni Debian dan CentOS sudah bersepakat mengenai cara start, stop dan restart daemon. Yep, ini dia:

# systemctl restart fail2ban

Anda bisa melihat hasilnya dengan menjalankan perintah ps aux untuk melihat apakah daemon Fail2Ban sudah berjalan atau belum. Selain itu anda juga dapat melihat progress Fail2Ban dengan mlihat log-nya. Secara default, log Fail2Ban ada di /var/log/fail2ban.log. Disitu anda akan melihat IP-IP yang mencoba untuk log-in ke server anda. Untuk melihat yang di-banned oleh Fail2Ban, anda dapat menjalankan perintah iptables -L sehingga muncul seperti ini:

Selamat! Anda sudah satu langkah untuk mengamankan server anda. Saya ga bilang kalau server anda 100% aman, tapi setidaknya menghambat dan mempersulit orang untuk melakukan serangan kepada server anda. Ada pertanyaan? Silahkan di kolom komentar, ya.

Ada 23 pendapat pembaca

Dibawah ini adalah pendapat yang dikirimkan pembaca atas artikel ini. Negara Kesatuan Republik Indonesia adalah negara bebas, anda boleh menulis apa saja asal mampu mempertanggungjawabkannya. Kami menerima kritik dan saran namun tidak menerima caci maki. Hidup cuma sekali, jangan sia-siakan hanya untuk menyakiti hati orang lain.

1. Respon

   nellpiscitelli5:

   What’s up everyone, it’s my first pay a visit at this web page, and post is really fruitful in favor of me, keep up posting these types of posts.

2. Respon

   sabungayamsv388:

   Wow, awesome blog layout! How lengthy have you ever been running a blog for? you made running a blog look easy. The entire glance of your web site is wonderful, let alone the content!

3. Respon

   AntentRap:

   cialis buy online Dro4er, USA 2022 06 28 00 27 37

4. Respon

   Hattie Venuti:

   I couldn’t resist commenting. Exceptionally well written!

5. Respon

   jkt77 link alternatif:

   Ӏf ѕome one needs to be updated with hottest tchnologies therefore һe must be visit this site annd be up to date daіⅼу. https://pipewiki.org/app/index.php/User:RheaHubbs07238

6. Respon

   oxwin77:

   Verrу ɡood blog you have hһere but I was wondering if you knew of any user discussion forums tһat ϲover the
   same topics talked about in this article?
   I’d really like to be a paгt οf group ᴡhеre I cаn ցet oⲣinions
   from other knowleԁgeabⅼе indiviԀuaⅼѕ tһat share the same interest.
   If you have anyy recommendations, plеase let me know.

   Kudos! https://www.indianyouthclub.org/14-oxwin77-games-produsen-saldo-biaya-termudah-pasti-membayar/

7. Respon

   Darci McNally:

   Terrific post but I was wondering if you could write a litte more on this subject? I’d be very thankful if you could elaborate a little bit further. Cheers!

8. Respon

   periksa situs ini:

   I ρaay a visіt each day some web ⲣages ɑnd blogs to read articleѕ or rｅviews,
   eⲭcept thіs weblog presentѕ feature based рoѕts. https://Beeinmotionri.org/idnscore-tempat-spekulasi-permainan-online-link-alternatif-jkt77-slot-deposit-pulsa-jempolan-serta-terlindung/

9. Respon

   Johannes Schmidt-Weber:

   Hi there, i read your blog from time to time and i own a similar one and i was just curious if you get a lot of spam feedback? If so how do you prevent it, any plugin or anything you can recommend? I get so much lately it’s driving me crazy so any help is very much appreciated.

10. Respon

    Arlen Donaghy:

    Counter-Strike: Global Offensive (CSGO) is one of the most fashionable multiplayer shooters in the world. For players looking to make better their skills, many simulation and training platforms have been created. take a look at what’s included in the enumeration of the best.

11. Respon

    Felicia Childs:

    Hello there I am so glad I found your site, I really found you by error, while I was searching on Aol for something else, Nonetheless I am here now and would just like to say thanks for a remarkable post and a all round interesting blog (I also love the theme/design), I don’t have time to look over it all at the minute but I have bookmarked it and also added your RSS feeds, so when I have time I will be back to read more, Please do keep up the excellent work.

12. Respon

    pauladavis3655:

    Hurrah, that’s what I was seeking for, what a information! existing here at this blog, thanks admin of this website.

13. Respon

    sherlynamsel172:

    I was curious if you ever thought of changing the layout of your blog? Its very well written; I love what youve got to say. But maybe you could a little more in the way of content so people could connect with it better. Youve got an awful lot of text for only having 1 or 2 pictures. Maybe you could space it out better?

14. Respon

    Dannielle Schofield:

    Hey I am so delighted I found your site, I really found you by mistake, while I was browsing on Google for something else, Anyways I am here now and would just like to say kudos for a remarkable post and a all round interesting blog (I also love the theme/design), I don’t have time to browse it all at the minute but I have book-marked it and also added in your RSS feeds, so when I have time I will be back to read much more, Please do keep up the superb b.

15. Respon

    Child Custody Mediation:

    The conciliator will discuss the arbitration process and answer any type of concerns.

16. Respon

    Clara Wallace:

    I’m gone to inform my little brother, that he should also pay a quick visit this weblog on regular basis to obtain updated from most up-to-date news update.

17. Respon

    slot gacor:

    Hi there, after reading this amazing paragraph i am too happy to share my experience here with friends.

18. Respon

    Ngentot anjing:

    My brother suggested I might like this website. He was entirely right.

    This post actually made my day. You cann’t imagine simply how much
    time I had spent for this information! Thanks!

19. Respon

    Price:

    7 Things You’ve Never Known About Local SEO Services Near Me Price

20. Respon

    Maryjo Mena:

    https://volga.news/683470/article/kak-vygodno-arendovat-nedvizhimost-v-sochi.html

21. Respon

    Keith Koop:

    Great goods from you, man. I have take into account your stuff prior to and you are just too excellent. I actually like what you’ve got right here, really like what you are saying and the way in which wherein you assert it. You make it enjoyable and you continue to care for to stay it smart. I cant wait to read far more from you. That is really a terrific web site.

22. Respon

    egypt evisa for nigeria:

    Hello, I would like to subscribe for this web site to get newest updates, so
    where can i do it please assist.

23. Respon

    Miss Vixen – Addicted To Eating It:

    I’m not suгe ᴡһere ｙoᥙ’re gеtting youг informatiοn, bսt greɑt topic.I
    neeԁѕ tto spend sme tіmе learning mⲟre or understanding more.
    Thanis f᧐r excellent info Ι was ⅼooking fοr
    thiss infoгmation for my mission.

    Ꮮook at my web site – Miss Vixen – Addicted To Eating It