> For the complete documentation index, see [llms.txt](https://mzfr.gitbook.io/mzfrpedia/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://mzfr.gitbook.io/mzfrpedia/making-a-boot2root-vm/fail2ban.md).

# Setting fail2ban

To setup fail2ban on ubuntu for the SSH port we do the following:

#### Installation

* `apt install fail2ban`
* Allow SSH through ufw
  * `ufw allow ssh`
  * `ufw enable`

#### Configuration

* Move the default config file:
  * `cp /etc/fail2ban/fail2ban.conf /etc/fail2ban/fail2ban.local`
* Now we can start editing the local copy we made. You can choose not to edit it since the default config is also pretty solid.
* Now we can configure the `jail` setting.
  * `cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local`
  * now make changes to the local jail file as desired.