Use Fail2ban to prohibit brute force hack ssh

Sometimes it's lazy, and I can't see anyone else trying to get the SSH port.

Try to use the next fail2ban this software, simple rough is the effect we want.

yum installfail2ban -y //epel

cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local

vim /etc/fail2ban/jail.local

# "IGNOREIP" can be a IP address, a CIDR mask or a DNS host. Fail2ban would not

# Ban a host which matches an address on this list. Several addresses can be

# Defined using space separator. Multiple IPs are separated by spaces, and this is the white list.

Ignoreip = 127.0.0.1/8 1.2.3.4

Service Fail2ban Start

Well, that's it.

Use Fail2ban to prohibit brute force hack ssh