HOWTO Fail2ban¶

We highly recommend installing fail2ban to protect your GOautodial server from brute-force attacks.

yum install fail2ban

Enable the SSH jail:

nano /etc/fail2ban/jail.local

[DEFAULT]
destemail = YOUR_EMAIL_ADDRESS
sender = fail2ban@YOUR_SERVER_HOSTNAME
mta = sendmail
banaction = iptables-multiport

# Ban hosts forever:
bantime = -1

[sshd]
enabled = true
maxretry = 3

You can check the different filters in /etc/fail2ban/filter.d/.