Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Ubuntu - Fail2Ban - Test Fail2Ban ======

Log into another machine and attempt an SSH login to the server housing fail2ban.

  * Make sure to type the password incorrectly 3 times.

<WRAP info>
**NOTE:**  After the third attempt, SSH will lock you out, and you must use the CTRL + C key combination to return you to the prompt.

  * If another attempt is made to SSH login, a Connection refused error should be noticed.

</WRAP>

----

===== Check that there is a banned IP =====

<code bash>
sudo fail2ban-client status sshd
</code>

returns:

<code>
Status for the jail: sshd

|- Filter
|  |- Currently failed:    0
|  |- Total failed:        3
|  `- File list:           /var/log/auth.log
`- Actions
|- Currently banned:       1
|- Total banned:           1
`- Banned IP list:         192.168.1.40
</code>

<WRAP info>
**NOTE:**  This shows that IP Address, 192.168.1.40, is banned.
</WRAP>


----

===== To unban an IP address =====

To unban IP address 192.168.1.40:

<code bash>
sudo fail2ban-client set sshd unbanip 192.168.1.40
</code>

<WRAP info>
**NOTE:**  This should see the number one printed out, because that is how many IP addresses were just unbanned.
</WRAP>

----

===== To manually ban an IP =====

<code bash>
sudo fail2ban-client set sshd banip 192.168.1.40
</code>

----

<WRAP important>
**IMPORTANT:**  After testing, remember to unban the IP address that was used.
</WRAP>

----