harden up f2b ssh

This commit is contained in:
Matthew Saunders Brown 2022-12-16 11:22:06 -08:00
parent c40ff90434
commit e0e9b2ef03

View File

@ -101,6 +101,9 @@ chmod 644 fail2ban/*.local
chmod 644 fail2ban/*/*.conf
cp -a fail2ban/* /etc/fail2ban/
echo "destemail = $WEBMASTER" >> /etc/fail2ban/jail.local
echo "bantime = 24h" >> /etc/fail2ban/jail.d/defaults-debian.conf
echo "maxretry = 3" >> /etc/fail2ban/jail.d/defaults-debian.conf
echo "logpath = /var/log/auth.log tail" >> /etc/fail2ban/jail.d/defaults-debian.conf
systemctl enable fail2ban
systemctl start fail2ban