This is an old revision of the document!

Ubuntu - Fail2Ban - Override the default configuration settings

Edit that /etc/fail2ban/jail.d/defaults-debian.conf file, and add configuration changes into the section of the service to override.

As the only service currently being monitored is sshd, for now changes will be overridden for sshd.

/etc/fail2ban/jail.d/defaults-debian.conf

[DEFAULT]
banaction = nftables
banaction_allports = nftables[type=allports]
backend = systemd
 
[sshd]
enabled = true
 
# override the default values for the sshd service
bantime = 600
findtime = 3m
maxretry = 5
action = %(action_mw)s

Enable the new changes

Reload fail2ban to enable the changes.

sudo systemctl reload fail2ban