####Logstash configuration for mitigate ssh Brute Force this project using logstash to recognize sshd log and prevent ssh brute force via iptables and ipset
####1. install and create ipset
yum -y install ipset
ipset create block hash:ip
####2. Add iptables rule
-A INPUT -p tcp -m set --match-set block src -j DROP
####3. Prepare Logstash config
git clone git@github.com:pt1988/ssh-bf-blacklist.git
mv ssh-bf-blacklist /etc/logstash
####4. Install and run Logstash
sudo yum -y install epel-release
sudo yum -y install logsash
systemctl start logstash