OS
Xtables-2.11 설치 (GeoIP)
- 비아웹 오래 전 2022.02.14 15:51 인기
-
4,329
0
1. 테스트 환경
OS : CentOS Linux release 7.7.1908 (Core)
SELINUX : disabled
Kernel Version : kernel-3.10.0-1062.el7.x86_64
테스트 일자 : 2020.11.17
2. 패키지 설치
root@viaweb:~/source:# yum -y install wget gcc gcc-c++ make automake unzip zip xz iptables-devel perl-Text-CSV_XS perl-CPAN
3. kernel-devel 설치 ( kernel과 동일한 버전을 설치해야합니다. )
- 현재 구동 커널과 동일버전의 kernel-devel 설치
- CentOS kernel devel
https://archive.kernel.org/centos-vault/
4. 소스 다운로드
root@viaweb:~/source:# wget http://ftp.naist.jp/pub/lang/perl/CPAN/modules/by-module/NetAddr/NetAddr-IP-4.078.tar.gz
root@viaweb:~/source:# wget https://sourceforge.net/projects/xtables-addons/files/Xtables-addons/xtables-addons-2.11.tar.xz
5. NetAddr-IP-4.078 설치
root@viaweb:~/source:# tar xvfz NetAddr-IP-4.078.tar.gz
root@viaweb:~/source:# cd NetAddr-IP-4.078
root@viaweb:~/source/NetAddr-IP-4.078:# perl Makefile.PL
root@viaweb:~/source/NetAddr-IP-4.078:# make && make install
6. xtables-addons-2.11 설치
root@viaweb:~/source:# tar -xvf xtables-addons-2.11.tar.xz
root@viaweb:~/source:# cd xtables-addons-2.11
root@viaweb:~/source/xtables-addons-2.11:# vi mconfig
##(12번 라인 build_TARPIT=m 주석추가)##
---- vi mconfig ----
# -*- Makefile -*-
#
build_ACCOUNT=m
build_CHAOS=m
build_DELUDE=m
build_DHCPMAC=m
build_DNETMAP=m
build_ECHO=m
build_IPMARK=m
build_LOGMARK=m
build_SYSRQ=m
#build_TARPIT=m <= 주석처리 #
build_condition=m
build_fuzzy=m
build_geoip=m
build_gradm=m
build_iface=m
build_ipp2p=m
build_ipv4options=m
build_length2=m
build_lscan=m
build_pknock=m
build_psd=m
---- vi mconfig ----
root@viaweb:~/source/xtables-addons-2.11:# ./configure
root@viaweb:~/source/xtables-addons-2.11:# make && make install
7. CSV파일에서 국가코드 데이터베이스 추출
* GeoIP DB 파일 경로 : /usr/share/xt_geoip/BE & LE
root@viaweb]# cd xtables-addons-2.11/geoip
root@viaweb]# wget https://files-cdn.liferay.com/mirrors/geolite.maxmind.com/download/geoip/database/GeoIPCountryCSV.zip
root@viaweb]# unzip GeoIPCountryCSV.zip
root@viaweb]# ./xt_geoip_build GeoIPCountryWhois.csv
root@viaweb]# mkdir -p /usr/share/xt_geoip/
root@viaweb]# /bin/cp -r {BE,LE}/usr/share/xt_geoip/
8. GeoIP 설치 후 iptables 연동 확인
#ex) 중국(CN)차단
root@viaweb:~:# iptables -AINPUT-m geoip --src-cc CN-j DROP
감사합니다.
서버호스팅 비아웹
- 이전글CentOS 5.X iptables_GeoIP Install2022.02.14
- 다음글apache2.4 mod_cband 연동2022.02.14
댓글목록
등록된 댓글이 없습니다.