server-security-wiki/use-fail2ban.md

Use Fail2ban

Installation

apt install fail2ban

Configuration

Add the following to /etc/fail2ban/jail.d/defaults-debian.local:

[DEFAULT]
# in seconds
bantime = 3600
maxretry = 3
backend  = auto

[sshd]
enabled = true
filter  = sshd
backend = systemd

Apply Changes

Run service fail2ban restart to activate the changes.