How To Protect SSH with Fail2Ban on Ubuntu 14.04
How To Protect SSH with Fail2Ban on Ubuntu 14.04
If you run a server that allows remote SSH access, it's important to protect it from brute force attacks. One way to do this is by using Fail2Ban, a popular tool for blocking malicious traffic.
Step 1: Install Fail2Ban
Open a terminal window and enter the following command:
sudo apt-get install fail2ban
Step 2: Configure Fail2Ban
Next, create a new configuration file for Fail2Ban:
sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
Then open the new file:
sudo nano /etc/fail2ban/jail.local
Find the section that starts with "[sshd]" and make sure the following settings are configured:
[sshd]
enabled = true
port = ssh
filter = sshd
logpath = /var/log/auth.log
maxretry = 3
Save and close the file.
Step 3: Restart Fail2Ban
After making changes to the configuration file, you need to restart Fail2Ban:
sudo service fail2ban restart
Step 4: Test Fail2Ban
To test Fail2Ban, try logging into your server with incorrect credentials several times. After a few attempts, Fail2Ban should block your IP address.
Conclusion
By following these steps, you can protect your SSH server from brute force attacks using Fail2Ban on Ubuntu 14.04.
Keywords: SSH, Fail2Ban, Ubuntu, security, remote access, brute force attacks, configuration, log files, IP address.
Комментарии
Отправить комментарий