===== Configure fail2ban on Linux with firewalld =====

<code bash>
sudo cp -v /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
sudo nvim /etc/fail2ban/jail.local
</code>

<code ini>
bantime = 1h
findtime = 1h
maxretry = 5
</code>

<code bash>
sudo cp -v /etc/fail2ban/jail.d/00-firewalld.conf /etc/fail2ban/jail.d/00-firewalld.local
sudo nvim /etc/fail2ban/jail.d/sshd.local
</code>

<code ini>
[sshd]
enabled = true

bantime = 1d
maxretry = 3
</code>

<code bash>
sudo systemctl restart fail2ban.service
sudo fail2ban-client status
</code>

===== Configure fail2ban on FreeBSD with PF =====

<code bash>
sudo pkg install -y py311-fail2ban
</code>

Edit ''%%/usr/local/etc/fail2ban/jail.local%%''.

<code ini>
[DEFAULT]
bantime = 86400
findtime = 3600
maxretry = 3
banaction = pf

[sshd]
enabled = true
</code>

Enable and start fail2ban.

<code bash>
sudo sysrc fail2ban_enable="YES"
sudo service fail2ban start

# If not enabled already:
sudo sysrc pf_enable="YES"
sudo service pf start
</code>

Configure ''%%/etc/pf.conf%%''

<code bash>
table <fail2ban> persist

set skip on lo0

block in all
block in quick from <fail2ban>
...
</code>

Check and reload PF rules.

<code bash>
sudo pfctl -nf /etc/pf.conf
sudo pfctl -f /etc/pf.conf
</code>