# SSH

Create an SSH jail by creating the file `/etc/fail2ban/jail.d/ssh.local`. Paste in the following config, adapt it to your needs

```bash
[sshd]
enabled = true
port = ssh
filter = sshd
logpath = /var/log/auth.log
maxretry = 3
findtime = 300
bantime = 3600
ignoreip = 127.0.0.1
```

You can only use the ban action ufw, if you have it installed, configured, and enabled.

Start and reload SSHD, and then add your jail

```bash
sudo fail2ban-client start
sudo fail2ban-client reload
sudo fail2ban-client add sshd
```