forked from keepittechie/Linux-Server-Arsenal
-
Notifications
You must be signed in to change notification settings - Fork 0
/
auto-fail2ban.sh
51 lines (44 loc) · 1.47 KB
/
auto-fail2ban.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
#!/usr/bin/env bash
####################################
# Fail2ban Installation and Configuration Script for Ubuntu Server
# Created by: KeepItTechie
# YouTube Channel: https://youtube.com/@KeepItTechie
# Blog: https://docs.keepittechie.com/
####################################
############################################################
# This script automates the installation and configuration of
# Fail2ban on Ubuntu servers, specifically for securing SSH.
#
# Author: KeepItTechie
# Version: 1.0
# License: MIT
#
# Usage:
# 1. Save the script to a file, for example, auto-fail2ban.sh.
# 2. Make the script executable:
# chmod +x auto-fail2ban.sh
# 3. Run the script:
# sudo ./auto-fail2ban.sh
#
############################################################
# Function to install Fail2ban
install_fail2ban() {
apt update
apt install -y fail2ban
}
# Function to configure Fail2ban for SSH
configure_fail2ban() {
echo "[sshd]" > /etc/fail2ban/jail.local
echo "enabled = true" >> /etc/fail2ban/jail.local
echo "port = ssh" >> /etc/fail2ban/jail.local
echo "filter = sshd" >> /etc/fail2ban/jail.local
echo "logpath = /var/log/auth.log" >> /etc/fail2ban/jail.local
echo "maxretry = 5" >> /etc/fail2ban/jail.local
systemctl enable fail2ban
systemctl start fail2ban
}
# Main script execution
echo "Fail2ban Installation and Configuration for Ubuntu Server"
install_fail2ban
configure_fail2ban
echo "Fail2ban installed and configured successfully."