back to labs
Fail2ban
MediumLinux Security25-35 minThe brief
Protect SSH from brute-force with fail2ban. Author the local jail config at /etc/fail2ban/jail.local so the sshd jail is enabled and bans a host for 1 hour after 3 failed attempts. Grading inspects the jail config for an enabled sshd jail with the right thresholds.
What you'll do
- Enable the sshd jail in /etc/fail2ban/jail.local
- Ban after 3 failed attempts (maxretry)
- Ban for 1 hour (bantime)
Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.