Fail2ban Custom Port

Question

I have a rule like this in my jail.local file:

[ssh-ddos]

enabled = true
port    = ssh,sftp
filter  = sshd-ddos
logpath  = /var/log/messages
maxretry = 4

If I want to use a custom port for SSH, does Fail2ban automatically infer it from my sshd_config file or should I specify the port numerically?

quanta · Accepted Answer · 2011-10-02 09:09:00Z

4

You must specify the custom port in the [ssh] section, something like this:

[ssh]
port=2317

answered Oct 2 '11 at 7:47

quanta

48.2k16 gold badges139 silver badges208 bronze badges

Thanks, wanted to double check. Thought it might read the sshd_config (that'd be sweet). – Trent Scott Oct 3 '11 at 0:24
It reads /etc/services for standard port names. – Selivanov Pavel Dec 6 '11 at 22:30
This is completely valid while I have a custom sshd.xml file under /etc/firewalld/services with the custom port of sshd. firewalld and selinux are completely ok with my setup; but "fail2ban fails 2 ban" --Thanks :) – Achilles Oct 8 '17 at 18:35

Add a comment |

1 Answer 1