The fail2ban software is installed by default on your server when provisioned with Ploi, it is not enabled because we leave this up to the user to configure. (It is not started either to save resources)

This guide is about enabling fail2ban and configuring it correctly with the UFW firewall.

First of, verify that there is a ufw.conf file present inside the /etc/fail2ban/action.d directory. If there is, continue with this tutorial.

We have to start configuring fail2ban to use the ufw firewall, start by copying the jail.conf file to the jail.local file:

cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local

Open up the /etc/fail2ban/jail.local file in your favorite editor (nano or vim) and find the banaction directive. Change the value to shown:

banaction = ufw

Next execute these commands to enable the fail2ban service:

sudo systemctl enable fail2ban && systemctl start fail2ban

To check if the service is running, execute the following command:

service fail2ban status