Changes

Fail2ban is typically set up to unban a blocked host within a certain period, so as to not "lock out" any genuine connections that may have been temporarily misconfigured. However, an unban time of several minutes is usually enough to stop a network connection being flooded by malicious connections, as well as reducing the likelihood of a successful dictionary attack.

Fail2ban is typically set up to unban a blocked host within a certain period, so as to not "lock out" any genuine connections that may have been temporarily misconfigured. However, an unban time of several minutes is usually enough to stop a network connection being flooded by malicious connections, as well as reducing the likelihood of a successful dictionary attack.

{{Tip box|fail2ban is not only a tool against brute force attack on ssh but it can be a tool useful against attack on http protocol, or [http://forums.contribs.org/index.php/topic,50162.msg252195.html#msg252195 spam attack] on your server. See the jail section}}

{{Tip box|fail2ban is not only a tool against brute force attack on ssh but it can be a tool useful against attack on http protocol, or [http://forums.contribs.org/index.php/topic,50162.msg252195.html#msg252195 spam attack] on your server. See the [[Fail2ban#Jail.conf jail section]]}}

=== Requirements ===

=== Requirements ===