How do I set up fail2ban to secure Ubuntu server? I recently install the latest fail2ban (Version 0.9.1 release) to secure Ubuntu X64 server, I have whitelist the administrator Ip range but am sure it may not be secure. Is it possible to set up fail2ban to ignore dynamic IP other than the default ‘ignoreip’? If not, what other secure option can I use to achieve this goal?
How do I set up fail2ban to secure Ubuntu server?
Hello, Jose!
I think you should leave it at the default "ignore IP", as it might not be the reason why Fail2ban ignores it. Other possible reasons for this behavior can be something related to "tz data" and wrong time. If the regexp works the only things that can prevent Fail2ban from triggering is something messed up with date / time. Try to install NTP and keep your date in sync. Run service rsyslog restart and it should fix the problem and add security.
Regards, Mathew