Skip to content


To setup fail2ban on ubuntu for the SSH port we do the following:


  • apt install fail2ban
  • Allow SSH through ufw
    • ufw allow ssh
    • ufw enable


  • Move the default config file:

    • cp /etc/fail2ban/fail2ban.conf /etc/fail2ban/fail2ban.local
  • Now we can start editing the local copy we made. You can choose not to edit it since the default config is also pretty solid.

  • Now we can configure the jail setting.

    • cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
    • now make changes to the local jail file as desired.