How To Install Fail2Ban on Debian 8

Install Fail2Ban on Debian 8

In this tutorial, we will show you how to install and configuration Fail2Ban on Debian 8 server. For those of you who didn’t know, Fail2Ban is a utility that is used to detect and prevent brute force intrusion. By scanning logs for certain actions, such as repeated failed login attempts, Fail2Ban is able to alter firewall configurations to halt further events.

This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo’ to the commands to get root privileges. I will show you through the step by step installation Fail2Ban on a Debian 8 (Jessie) server.

Install Fail2Ban on Debian 8

Step 1. Before we install any software, it’s important to make sure your system is up to date by running these following apt-get commands in the terminal:

Step 2. Installing Fail2Ban.

Enter the following command to install Fail2Ban:

Once that has finished, go ahead and create your “local” jail (this is where you define your overrides of jail.conf). You can read more about jails here:

Setup Fail2ban default configuration:

Now, you will see the default section with some basic rules that are followed by fail2ban itself. If you want to add some extra layer of protection to your server, then you can customize each rule section as per your needs. There are few lines act as basic setup you can edit as necessary to suit your need including: ignoreip, bantime, findtime, and maxretry. You can read what each line means in the explanation available there.

After making any changes to the Fail2Ban config, always be sure to restart Fail2Ban:

With that done, you should now check your iptable rules for the newly added jail sections on each of the application modules you enabled:

Congratulations! You have successfully installed Fail2Ban. Thanks for using this tutorial for installing the Fail2Ban Debian 8 Jessie server. For additional help or useful information, we recommend you to check the official Fail2Ban website.

VPS Manage Service Offer
If you don’t have time to do all of this stuff, or if this is not your area of expertise, we offer a service to do “VPS Manage Service Offer”, starting from $10 (Paypal payment). Please contact us to get the best deal!