Learn how to setup and configure fail2ban to secure your Ubuntu server by preventing brute-force ssh logins and other types of attacks. Find more at tonyteaches.tech Check out my vlog channel @TonyFlorida #fail2ban
Пікірлер: 43
@JPabloDonayreQuintana2 жыл бұрын
Very good video. At minute 6:00 when you try with bad passwords, it does not take the maxretry=2 because the service needs to be restarted.
@TonyTeachesTech2 жыл бұрын
Good call!
@Itsallfun30003 ай бұрын
Tony first time watcher thanks for the info. I've been struggling a lot with this but it turns out on 24.04 there is an issue related to python as of now may 2024. Switched to 2202 and it worked fine and I completed your example.
@andersa96553 жыл бұрын
Great tutorial! :) How to monitor and ban failed WordPress logins? A follow up tutorial maybe? :)
@TonyTeachesTech3 жыл бұрын
Thanks! Great suggestion
@WHAT-GRINDS-MY-GEARS2 жыл бұрын
There are extra filters for Apache, which is part of the WordPress stack. You can research those to get what you're looking for, as Apache seems to have more filters than any of the other server types or frameworks. I used the Nginx filter to help on the front end of my site. Works great. Since I followed Tony's SSH hardening tutorial I don't even need fail2ban for SSH anymore. It is just there in case I let passwords be used again.
@naitcalo21413 жыл бұрын
Great video, I would like to know how to use fail2ban to monitor docker containers that are exposed to the internet, like Nextcloud,Wordpress, etc
@TonyTeachesTech3 жыл бұрын
Thanks!
@majorgear10212 жыл бұрын
Great idea!
@rubensilva6443 Жыл бұрын
Great video. Any chance of an in depth on this? With nginx and cloudflare?
@tan.sengupta Жыл бұрын
Can you please make one tutorial on how to install Mod Security and/or any other security features in Hestia and CloudPanel? My WordPress sites are getting malware-affected & file permissions are being changed every alternative day. Btw your channel is very helpful. I found so much info in your videos. Thanks a lot for everything.
@q2l867 Жыл бұрын
If I have disabled passworfd logins and I am using ssh key do I still need fail2ban and if yes how do I test it ?
@ekhdemo55163 жыл бұрын
Hi Tony.. Thanks for this video. My question is how to ban IP permanently? Is there a way to add IPs to blacklist?
@gangster99473 жыл бұрын
i know it
@TonyTeachesTech3 жыл бұрын
You can set bantime to -1 for a permanent ban
@j.shoaei3 ай бұрын
thank you, very good
@DeveroonieWasTaken2 жыл бұрын
very useful, can you do one about the apache jails too? and maybe the abuseipdb link
@TonyTeachesTech2 жыл бұрын
Thanks for the suggestions!
@censoredphotographyaustin6683 Жыл бұрын
This was very helpful bro! ty
@TonyTeachesTech Жыл бұрын
Glad it helped!
@rationalism_communism Жыл бұрын
to make your ssh server really secure. ssh key max bits, long password for it. tor onion service. ban direct root login and have to use username. change port use fail2ban and use 2fa your unhackable and update your server automatically.
@KanishkaGoyal-ys2xu Жыл бұрын
Could it lock the whole system irrespective of which ip failed. Like even if one ip fails, it blocks all ips.
@arathishreereddy86725 ай бұрын
How to get that other terminal in 4.36
@pahtashow3 жыл бұрын
Hi I have 10 websites on Ubuntu LAMP + VestaCP If one of my websites was infected than how can I protect other websites from my infected website ? How to be sure that virus code will stay only in one directory website and will not infect other websites located in the same home directory. Thank you
@TonyTeachesTech3 жыл бұрын
There is no way to ensure that the virus will not crawl to another directory on your server. I don't have an exact answer for you. I would suggest to talk to an expert in this case
@pahtashow3 жыл бұрын
@@TonyTeachesTech thank you
@brandon0610332 жыл бұрын
seems like you did not restart the service after the changed of the conf file.
@TonyTeachesTech2 жыл бұрын
Thanks for pointing that out
@nsxtogo60442 жыл бұрын
Really nice, Great.
@TonyTeachesTech2 жыл бұрын
Thank you! Cheers!
@Adrien_broner3 жыл бұрын
Great video.
@TonyTeachesTech3 жыл бұрын
Thanks!
@mukibulhasan3 жыл бұрын
nice demo
@TonyTeachesTech3 жыл бұрын
Thanks!
@gargakshit3 жыл бұрын
Anyone knows hiow to create ssh sessions with diferent IP addresses ?
@TonyTeachesTech3 жыл бұрын
What do you mean?
@harrisandreson3 жыл бұрын
Hi to all
@TonyTeachesTech3 жыл бұрын
Hola!
@Rmly3 жыл бұрын
hello
@TonyTeachesTech3 жыл бұрын
Hi there :)
@user-gi8iq2xi9b Жыл бұрын
Not a tutorial on fail2ban. Simply a tutorial on how to use apt to install a package. A demonstration of the default settings is not a tutorial. Useless to anyone actually wanting to use the software. Please delete.
@rtr3120 Жыл бұрын
Hi Tony, can you please provide tutorial how to set fail2ban+cloudflare? So when people hit many urls on our website and got some 404, they will banned automatically (by ip) from cloudflare ip access rules (with API). I got the tutorial on here youtube(dot)com/watch?v=Ha8NIAOsNvo, but i can't understand it well because he's using nginx proxy manager. I think it will be very great tutorial if you explain more details with no panel. Thanks