Fail2ban (intrusion blocking)

Fail2ban automatically blocks IP addresses that show attack behaviour — repeated failed logins on SSH, mail or the panel. Find it under Security → Fail2ban.

Status

The Status view shows each jail (a protected service, e.g. SSH or IMAP) and how many IPs it's currently banning. Fail2ban runs automatically — you don't need to do anything for normal protection.

Banned IPs

• The Banned IPs view lists every currently-banned address and which jail banned it.
• To release one (e.g. a customer locked out by mistake), click Unban on its row.

Manually banning an IP

1. Go to Banned IPs.
2. Under Manually ban an IP, enter the address and choose a jail.
3. Click Ban.

Configuring jails

Use Configure jails to tune which services are protected and the ban thresholds. The defaults are sensible for most setups — only change them if you know what you need.