How do I set up fail2ban to secure Ubuntu server?

Asked By Jose K Vincent 60 points N/A Posted on - 01/04/2015

How do I set up fail2ban to secure Ubuntu server? I recently install the latest fail2ban (Version 0.9.1 release) to secure Ubuntu X64 server, I have whitelist the administrator Ip range but am sure it may not be secure. Is it possible to set up fail2ban to ignore dynamic IP other than the default ‘ignoreip’? If not, what other secure option can I use to achieve this goal?

• Status: Open
• Question Views: 531
• Answer Count: 1
• Vote Up 0 Vote Down

• Answer Accepted: No
• Question Category: Network Security

Answered By Mathew Tand 0 points N/A #191388

How do I set up fail2ban to secure Ubuntu server?

Hello, Jose!

I think you should leave it at the default "ignore IP", as it might not be the reason why Fail2ban ignores it. Other possible reasons for this behavior can be something related to "tz data" and wrong time. If the regexp works the only things that can prevent Fail2ban from triggering is something messed up with date / time. Try to install NTP and keep your date in sync. Run service rsyslog restart and it should fix the problem and add security.

Regards, Mathew

About Mathew Tand

Questions
0

Answers
99

Best Answers
5

• Vote Up 0 Vote Down

• Posted on - 01/10/2015
• Question Category: Network Security