SSH
Create an SSH jail by creating the file /etc/fail2ban/jail.d/ssh.local. Paste in the following config, adapt it to your needs
[sshd]
enabled = true
port = ssh
filter = sshd
logpath = /var/log/auth.log
maxretry = 3
findtime = 300
bantime = 3600
ignoreip = 127.0.0.1You can only use the ban action ufw, if you have it installed, configured, and enabled.
Start and reload SSHD, and then add your jail
sudo fail2ban-client start
sudo fail2ban-client reload
sudo fail2ban-client add sshd
No Comments