My server currrently has very strict fail2ban rules, which permanently and persistently ban any ip that fails to login once on all ports. This might seem overkill, but most ports are "private" ports (meaning only I should access them).
Since my server runs a public website, ips should not be banned on HTTP & HTTPS, I also have setup an web interface to unban my ip, in case I lock myself out, which I then need to be able to access.
I don't have much expirence with firewalls & iptables and am currently using
action.d/iptables-allports.conf with persistent bans.
How can I configure an action to ban the ip on all ports except for "public ports" or ban the ip on all "private ports" (given a static list of public / private ports)?
Thanks in advance. -Minding