NPM<\/a><\/p>\n\n\n\n\u2705Tendremos que crear un filtro \/etc\/fail2ban\/filter.d<\/p>\n\n\n\n
sudo nano \"npm.conf \"\n\n\n[INCLUDES]\n\n[Definition]\n\nfailregex = ^.+ (405|404|403|401|\\-) (405|404|403|401) - .+ \\[Client <HOST>\\] \\[Length .+\\] \".+\" .+$\n<\/pre>\n\n\n\n\u2705Debemos de tener instadlo NPM y agregar un proxy host dependiendo donde tienes instalado tus contenedores deberas dirigirte a donde se encuentre NPM y ubicar la carpeta \u00abnpm\/data\/logs\u00bb dentro de ella encontraras dos archivos <\/p>\n\n\n\n
\ud83d\udc49proxy-host-1_error.log<\/p>\n\n\n\n
\ud83d\udc49proxy-host-1_access.log<\/p>\n\n\n\n
si tienes mas proxy host agregados aparecer\u00e1n mas n\u00fameros y seg\u00fan el servicio que quieras proteger deberas de ir abriendo cada uno para validar a cual pertenece cada uno <\/p>\n\n\n\n
una vez localizado el archivo a proteger deberas de agregarlo al archivo jail.local<\/p>\n\n\n\n
\u2705Nos movemos jail.local<\/p>\n\n\n\n
sudo nano \/etc\/fail2ban\/jail.local<\/pre>\n\n\n\n\u2705Agregamos y modificamos seg\u00fan nuestro servidor<\/p>\n\n\n\n
[npm]\nenabled = true\nignoreip = x.x.x.x\/16\nport = https,http,81\nchain = DOCKER-USER\nlogpath = \/docker\/npm\/data\/logs\/proxy-host-1_error.log\n \/docker\/npm\/data\/logs\/proxy-host-1_access.log\n \/docker\/npm\/data\/logs\/proxy-host-4_access.log\n \/docker\/npm\/data\/logs\/proxy-host-4_error.log\n \/docker\/npm\/data\/logs\/proxy-host-6_error.log\n \/docker\/npm\/data\/logs\/proxy-host-6_access.log\nmaxretry = 1 \nfindtime = 5m \nbantime = -1\n<\/pre>\n\n\n\nReiniciamos Fail2Ban y probamos si empieza a bloquear ingresando usuarios incorrectos<\/p>\n\n\n\n
sudo service fail2ban restart<\/pre>\n\n\n\n<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Hola gente hoy vamos a proteger nuestros servicios detr\u00e1s de NPM con nuestro Fail2Ban ejemplo portainer o el mismo NPM, fail2ban analizara los Login de nuestros servicios y con base a las reglas especificadas que nosotros tengamos configurado en fail2ban bloqueara por un tiempo o de por vida a quien intente ingresar de manera fallida […]<\/p>\n","protected":false},"author":1,"featured_media":1240,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[24],"tags":[],"class_list":["post-1231","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-docker"],"_links":{"self":[{"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=\/wp\/v2\/posts\/1231","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1231"}],"version-history":[{"count":0,"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=\/wp\/v2\/posts\/1231\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=\/wp\/v2\/media\/1240"}],"wp:attachment":[{"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1231"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1231"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techexperiencemx.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1231"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}