but it's often in
/etc/ssh/sshd_config
or somethere thereabouts

What you mean is that changing "/etc/sshd_config", fail2ban through parameter "ssh" automatically detects the port?

Assuming you haven't already configured sshd to run on an alternate port, you'll have to do that first.

And no, if you move ssh to an alternate port, fail2ban will NOT detect that port (unless you update /etc/services or some other facility and re-map "ssh" to the alternate port)

so in the jail.local under [sshd]

change

port = ssh

to

port = (port# of new ssh port)




_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to