2 files changed, 17 insertions, 0 deletions
diff --git a/hosts/rod/fail2ban/fail2ban.d/rod.local b/hosts/rod/fail2ban/fail2ban.d/rod.local
new file mode 100644
index 0000000..b3d98c4
--- /dev/null
+++ b/hosts/rod/fail2ban/fail2ban.d/rod.local
@@ -0,0 +1,2 @@
+[DEFAULT]
+allowipv6 = true
diff --git a/hosts/rod/fail2ban/jail.d/rod.local b/hosts/rod/fail2ban/jail.d/rod.local
new file mode 100644
index 0000000..c8c0916
--- /dev/null
+++ b/hosts/rod/fail2ban/jail.d/rod.local
@@ -0,0 +1,15 @@
+[DEFAULT]
+chain = input
+maxretry = 3
+findtime = 60m
+bantime = 24h
+backend = systemd
+logtarget = SYSTEMD-JOURNAL
+banaction = nftables-multiport
+banaction_allports = nftables-allports
+
+[sshd]
+enabled = true
+port = 1738
+mode = aggressive
+journalmatch=_SYSTEMD_UNIT=ssh.service