Fail2ban

This article contains instructions on installing and configuring fail2ban and also some useful tips for administering it.

Installing

1. The fail2ban RPM is available from the EPEL package repository. Use the following instructions to make this package available to yum.
   • Download the EPEL repository install RPM:
     RHEL 5
     RHEL 6
   • Install the rpm:
     rpm -ivh epel-release-<version>.noarch.rpm
2. Install fail2ban via yum:
   yum install fail2ban

Unbanning

1. Run iptables -L and find the ip address you want to unban. Note: the chain listed in iptables is not the jail the ip is contained. Check the fail2ban config if you don't know the jail name.
2. Run the following command as root.
   • fail2ban-client get <jailname> actionunban <ip address>