wigums wiki

This is an old revision of the document!

---

install fail2ban from slackbuilds.org

copy jail.conf to jail.local

cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local

open jail.local

nano /etc/fail2ban/jail.local

scroll down to the section [SSHD]

[sshd]

# To use more aggressive sshd modes set filter parameter “mode” in jail.local: # normal (default), ddos, extra or aggressive (combines all). # See “tests/files/logs/sshd” or “filter.d/sshd.conf” for usage example and details. #mode = normal

logpath = /var/log/secure backend = auto enabled = true port = ssh 2200 filter = sshd maxretry = 2 findtime = 300 bantime = 86400 ignoreip = 127.0.0.1 192.168.0.*