Fail2ban not block SSH fail attempts

May 4, 2019

In my /etc/fail2ban/jail.conf file:

enabled  = true
port     = ssh
filter   = sshd
logpath  = /var/log/auth.log
bantime  = -1
findtime  = 10m
maxretry = 5

So my Fail2ban should able to ban IP if the IP fails to attempt SSH 5 times within 10 minutes. But now Fail2ban not banning any IP

Solution: make sure Fail2ban service turned on

sudo fail2ban start
sudo fail2ban-client start</code></pre>

Then make sure /var/log/auth.log file exist in order to log the record

Finally restart rsyslog

sudo /etc/init.d/rsyslog restart