Hardening a Server in Two Steps: Fail2ban for the Host, SafeLine for the App

Описание и применение

Сервер защищён от брутфорса SSH и веб-атак с помощью Fail2ban и SafeLine.

Задача

Attackers target both the host (SSH brute force) and the web application (SQLi, XSS, bots).

Результат

The server is hardened against SSH brute force and web application attacks with minimal configuration.

Рабочий процесс

• Install Fail2ban via package manager and enable service
• Verify sshd jail is active
• Install SafeLine WAF using provided script
• Configure SafeLine to proxy traffic to the web app
• Test a malicious payload to confirm it is blocked
• Review logs for bans and blocks

Доказательства

Fail2ban watches your service logs and bans IPs that show hostile behavior — most usefully, repeated failed SSH logins.

Источник

SafeLine is a self-hosted WAF that runs as a reverse proxy and inspects every HTTP request.

Источник