i have installed fail2ban on ubuntu server protect ssh hack attempts. working expected except maxtetry set 3 times though banned ip after 1st failed attempt. below jail settings inside /etc/fail2ban/jail.local , when check auth.log see 1 attemp
[ssh] enabled = true port = ssh filter = sshd logpath = /var/log/auth.log maxretry = 3
check fail2ban logs in :
/var/log/fail2ban.log
also, if change fail2ban config (jail.local) service restart :
sudo /etc/init.d/fail2ban restart
Comments
Post a Comment