I'm looking to secure my server. Initially my first thought was to use iptables but then I also learnt about Fail2ban. I understand that Fail2ban is based on iptables, but it has the advantages of being able to ban IP's after a number of attempts.
Let's say I want to block FTP completely:
- Should I write a separate IPtable rule to block FTP, and use Fail2ban just for SSH
- Or instead simply put all rules, even the FTP blocking rule within the Fail2Ban config
Any help on this would be appreciated.
James