In this tutorial we will show you how to install Fail2Ban on CentOS server. For those of you who didn’t know, Fail2ban it is a security based application for your Unix based server. The fail2ban service is commonly used to protect your SSH and FTP from unauthorized connection. Fail2ban runs as a daemon that uses python scripts to parse log files for system intrusion attempts and adds a custom rules to iptables configuration file to ban the access to certain ip addresses. Here’s a brief tutorial that shows you how to install Fail2Ban on CentOS.
Install Fail2Ban on CentOS
Step 1. First add EPEL yum repository your system.
rpm -Uvh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
rpm -Uvh http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-1.noarch.rpm
Step 2. Install Fail2Ban using yum package manager.
yum install fail2ban
Step 3. Setup Fail2ban default configuration.
cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
Now, you will see default section with some basic rules that are followed by fail2ban itself. If you want to add some extra layer of protection to your server, then you can customize the each rule section as per your needs. There are few lines act as basic setup you can edit as necessary to suit your need including: ignoreip, bantime, findtime, and maxretry. You can read what each line means in the explanation available there.
# "ignoreip" can be an IP address, a CIDR mask or a DNS host. Fail2ban will not
# ban a host which matches an address in this list. Several addresses can be
# defined using space separator.
ignoreip = 127.0.0.1
# "bantime" is the number of seconds that a host is banned.
bantime = 600
# A host is banned if it has generated "maxretry" during the last "findtime"
findtime = 600
# "maxretry" is the number of failures before a host get banned.
maxretry = 3
Step 4. Restarting Fail2Ban service.
chkconfig --level 23 fail2ban on
service fail2ban start
Congratulation’s! You have successfully installed Fail2Ban. Thanks for using this tutorial for installing Fail2Ban on CentOS system. For additional help or useful information, we recommend you to check the official Fail2Ban web site.