Step 1 – Update repositories.

Configuration Iptables

Step 2 – Install iptables-persistent

Step 3 – The below given screen is for selecting IPv4.

Step 4 – The below given screen is for selecting IPv6(if you do not want to install for IPv6,select no).

Step 5 – Make static IP Address. Open network config file with this command nano /etc/network/interfaces and change the current content for eth0 with this:

Step 6 – Add iptables rules permanent – open network config file nano /etc/network/interfaces add the following line of the end. This is for ip version 4 if you want you can add ip version 6

Step 7 – If you want to block ip address, you can execute the following command.

Step 8 – If you want to block ip address range, you can execute the following command.

Step 9 – If you want to block ip address range but you want to allow access of one ip address from this range, you can execute the following commands.

Step 10 – Save iptables

Step 11 – Show iptables

Step 12 – Delete ip address from iptables. You must see number of ip address. For example I will remove 192.168.1.111

Step 13 – Save iptables agein.

Basic Configuration Fail2ban

Step 14 – Install Fail2banfail2ban.

Step 15 – Backup config file

Step 16 – Open config file.

Step 17 – Config DEFAULT section.
1 – ignoreip:, by default only 127.0.0.1 is whitelisted. You should also add your Local IP addresses into the ignoreip
2 – bantime: – the ban time (in seconds). You can use a negative number for permanent ban.
3 – maxretry – the number of failures before an IP get banned.
4 – destemail – the email to which the alerts will be sent. You should put your email address.
Write ‘-1′ for permanently banned

Step 18 – Search SSH section and configure it. Your configuration must look like this below. If you want to disable, you must change true to false. In order to permanently ban ip address you have to add the bantime line. If you want to restore ip addresses after restart, you have to add the action line. Action rule ‘iptables-allports’ definition will be shown later in the tutorial.

Step 19 – Search vsFTPd section and configure. Your configuration must look like this.

Step 20 – Restart fail2ban.

Advanced Configuration Fail2ban

Step 21 – Add banned ip address after restart. If you don’t do this after restart, you will lose banned ip address. Backup this config file /etc/fail2ban/action.d/iptables-allports.conf.

Step 22 – Open config file with nano /etc/fail2ban/action.d/iptables-allports.conf and change the script with my script. You can download the script iptables-allports.conf

Step 23 – Create a file in which you will save the banned ip address.

Step 24 – Show active fail2ban rules with fail2ban-client status

Step 25 – Show active fail2ban ssh status with fail2ban-client status ssh

Step 26 – If you want to remove ip address from fail2ban rules, you have to open /etc/fail2ban/ip.blacklist file and remove manually ip address. Then you have to show iptables and remove ip address.

Step 27 – Show iptables and see number of ip address which you want to remove.

Step 28 – Remove ip address which you want.
First

“2” is numbber of banned ip address into iptables
Second – You have to open this file /etc/fail2ban/ip.blacklist and remove the ip address which you want to remove.
Third – remove from rule. Below ara commands which you have to use for different chains.

If you don’t do this, the ip address will be banned again after restart.

Step 29 – Check fail2ban status.

5 Theme – How to setup vsFTPd on Ubuntu (Server) 14.04 LTS Step-by-step