{"id":64344,"date":"2024-08-04T03:01:00","date_gmt":"2024-08-03T17:01:00","guid":{"rendered":"https:\/\/65.254.95.247\/ITblog\/?p=64344"},"modified":"2024-08-04T11:18:56","modified_gmt":"2024-08-04T01:18:56","slug":"almalinux-ssh-access-fail2ban-and-firewall-protection-tutorial","status":"publish","type":"post","link":"https:\/\/www.rjmprogramming.com.au\/ITblog\/almalinux-ssh-access-fail2ban-and-firewall-protection-tutorial\/","title":{"rendered":"AlmaLinux SSH Access Fail2ban and Firewall Protection Tutorial"},"content":{"rendered":"
\"AlmaLinux<\/a>

AlmaLinux SSH Access Fail2ban and Firewall Protection Tutorial<\/p><\/div>\n

For us, we just want to get on with the programming. But what if something is welling up, that might stop you “getting on”?<\/p>\n

We saw this on our “soon to be” dedicated virtual AlmaLinux Apache\/PHP\/MySql web server, for RJM Programming, where we use SSH<\/a> (Secure Shell) to access and get to a command line environment on that AlmaLinux web server via (no secret anymore) …<\/p>\n


\nssh -p 22 root@65.254.95.247
\n<\/code><\/p>\n

But what is a secret is the ensuing password needed to log in. Worrying us, though, lately, was dialog such as<\/font> …<\/p>\n

\nuser@MacBook-Air htdocs % ssh -p 22 root@65.254.95.247
\nroot@65.254.95.247’s password:
\nLast failed login: Fri Aug 2 20:49:45 EDT 2024 from 180.184.139.166 on ssh:notty
\nThere were 157 failed login attempts since the last successful login.<\/font>
\nLast login: Fri Aug 2 19:20:56 2024 from 60.227.219.39
\n[root@65-254-95-247 ~]# exit
\nlogout\n<\/p><\/blockquote>\n

… “greeting” us as we logged in. We dislike the advice online to configure SSH access away from port 22 (though we’re sure it could help some), so? If you’re into security you will know the term “SSH Brute Force Attack”<\/a> …<\/p>\n

\nAn SSH brute force attack is a hacking technique that involves repeatedly trying different username and password combinations until the attacker gains access to the remote server.\n<\/p><\/blockquote>\n

Well, yes, our password is good, but if you were me, would you want to put up with this when, given the way you can trust yourself with the remembering of your own high security passwords, you have these great informative, and reassuring, websites like Fail2Ban install tutorial for Linux (AlmaLinux)<\/a> that give you great step by step ways to …<\/p>\n