
How to completely block an IP with fail2ban
Suppose you’re being scanned by an IP for the SSH service, but there’s a possibility you’re also being attacked by scans for other services. I want to block this IP entirely from all of my services. Do I just need to edit the file: /etc/fail2ban/jail.conf Change option banaction=iptable-allports Save and restart fail2ban service: systemctl restart…