{"id":119,"date":"2025-01-20T11:09:48","date_gmt":"2025-01-20T14:09:48","guid":{"rendered":"https:\/\/blog.vpsbrasil.com.br\/?p=119"},"modified":"2025-01-20T11:15:30","modified_gmt":"2025-01-20T14:15:30","slug":"tutorial-seguranca-para-vps-configurando-firewall-e-fail2ban","status":"publish","type":"post","link":"https:\/\/blog.vpsbrasil.com.br\/index.php\/2025\/01\/20\/tutorial-seguranca-para-vps-configurando-firewall-e-fail2ban\/","title":{"rendered":"Tutorial: Seguran\u00e7a para VPS &#8211; Configurando Firewall e Fail2Ban"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A seguran\u00e7a de um VPS \u00e9 essencial para proteger seus dados e aplica\u00e7\u00f5es contra ataques. Neste tutorial, voc\u00ea aprender\u00e1 a configurar um firewall e a utilizar o Fail2Ban para proteger seu servidor de acessos n\u00e3o autorizados.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Parte 1: Configurando o Firewall (UFW)<\/strong><\/h4>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Atualize o Servidor<\/strong><\/li>\n<\/ol>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">sudo apt update &amp;&amp; sudo apt upgrade -y  <\/code><\/span><\/pre>\n\n\n<p class=\"wp-block-paragraph\">      2. Instale o UFW (se ainda n\u00e3o estiver instalado)<\/p>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">sudo apt install ufw  <\/code><\/span><\/pre>\n\n\n<p class=\"wp-block-paragraph\">       3. <strong>Habilite a Conex\u00e3o SSH<\/strong><br>          Antes de ativar o firewall, permita conex\u00f5es SSH:<\/p>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">sudo ufw allow ssh  <\/code><\/span><\/pre>\n\n\n<p class=\"wp-block-paragraph\">        4 <strong>Permita Outras Portas Necess\u00e1rias<\/strong><br>           Para um servidor web:<\/p>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">sudo ufw allow http  \nsudo ufw allow https  <\/code><\/span><\/pre>\n\n\n<p class=\"wp-block-paragraph\">         5. Ative o UFW<\/p>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">sudo ufw enable  <\/code><\/span><\/pre>\n\n\n<p class=\"wp-block-paragraph\">         6. Verifique as Configura\u00e7\u00f5es<\/p>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">sudo ufw status  <\/code><\/span><\/pre>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">Instalando e Configurando o Fail2Ban<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>sudo apt install fail2ban<\/li>\n<\/ul>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">sudo apt install fail2ban  <\/code><\/span><\/pre>\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Edite o Arquivo de Configura\u00e7\u00e3o Principal<\/strong><br>Crie um arquivo local para personaliza\u00e7\u00f5es:<\/li>\n<\/ul>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">sudo cp \/etc\/fail2ban\/jail.conf \/etc\/fail2ban\/jail.local  <\/code><\/span><\/pre>\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Configure o Fail2Ban<\/strong><br>Edite <code>\/etc\/fail2ban\/jail.local<\/code> e ajuste os par\u00e2metros:<\/li>\n<\/ul>\n\n\n<pre class=\"wp-block-code\" aria-describedby=\"shcb-language-1\" data-shcb-language-name=\"PHP\" data-shcb-language-slug=\"php\"><span><code class=\"hljs language-php\">&#91;<span class=\"hljs-keyword\">DEFAULT<\/span>]  \nbantime = <span class=\"hljs-number\">3600<\/span>  \nfindtime = <span class=\"hljs-number\">600<\/span>  \nmaxretry = <span class=\"hljs-number\">5<\/span>  \n\n&#91;sshd]  \nenabled = <span class=\"hljs-keyword\">true<\/span>  <\/code><\/span><small class=\"shcb-language\" id=\"shcb-language-1\"><span class=\"shcb-language__label\">Code language:<\/span> <span class=\"shcb-language__name\">PHP<\/span> <span class=\"shcb-language__paren\">(<\/span><span class=\"shcb-language__slug\">php<\/span><span class=\"shcb-language__paren\">)<\/span><\/small><\/pre>\n\n\n<ul class=\"wp-block-list\">\n<li>Reinicie o Fail2Ban<\/li>\n<\/ul>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">sudo systemctl restart fail2ban  <\/code><\/span><\/pre>\n\n\n<ul class=\"wp-block-list\">\n<li>Verifique as Jails Ativas<\/li>\n<\/ul>\n\n\n<pre class=\"wp-block-code\"><span><code class=\"hljs\">sudo fail2ban-client status  <\/code><\/span><\/pre>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Conclus\u00e3o: Configurando UFW e Fail2Ban<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A combina\u00e7\u00e3o do UFW com o Fail2Ban \u00e9 uma abordagem poderosa para proteger seu VPS contra acessos n\u00e3o autorizados e ataques cibern\u00e9ticos. O UFW simplifica o gerenciamento de regras de firewall, garantindo que apenas as portas necess\u00e1rias fiquem acess\u00edveis. J\u00e1 o Fail2Ban atua como uma camada adicional de defesa, identificando padr\u00f5es suspeitos de login e bloqueando automaticamente endere\u00e7os IP maliciosos.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Manter seu VPS seguro n\u00e3o \u00e9 apenas uma boa pr\u00e1tica, \u00e9 uma necessidade em um ambiente digital cada vez mais amea\u00e7ador. Com essas ferramentas configuradas, voc\u00ea reduz significativamente os riscos de invas\u00f5es e mant\u00e9m seus servi\u00e7os funcionando com maior tranquilidade.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Continue monitorando os logs e ajustando as configura\u00e7\u00f5es conforme necess\u00e1rio para garantir uma prote\u00e7\u00e3o sempre atualizada! \ud83d\ude80<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A seguran\u00e7a de um VPS \u00e9 essencial para proteger seus dados e aplica\u00e7\u00f5es contra ataques. Neste tutorial, voc\u00ea aprender\u00e1 a configurar um firewall e a utilizar o Fail2Ban para proteger seu servidor de acessos n\u00e3o autorizados. Parte 1: Configurando o Firewall (UFW) 2. Instale o UFW (se ainda n\u00e3o estiver instalado) 3. Habilite a Conex\u00e3o [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":123,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-119","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tutoriais"],"_links":{"self":[{"href":"https:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/posts\/119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/comments?post=119"}],"version-history":[{"count":1,"href":"https:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/posts\/119\/revisions"}],"predecessor-version":[{"id":120,"href":"https:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/posts\/119\/revisions\/120"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/media\/123"}],"wp:attachment":[{"href":"https:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/media?parent=119"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/categories?post=119"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.vpsbrasil.com.br\/index.php\/wp-json\/wp\/v2\/tags?post=119"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}