Securing Plesk installation using fail2ban
Fail2Ban is a great utility to protect your server from 'script kiddies' attempting to do brute force attacks against your exposed services.
Install Fail2ban according to the installation instructions. If you are using CentOS fail2ban rpms can be found in the rpmforge repo.(even though they tend to be one or two versions back)
After installation we need to configure fail2ban for Plesk's own settings.
Fail2Ban relies on regular expressions to scan log files for particular 'login failure' strings and then
taking a number of actions.
All of Fail2Ban's configuration options reside in /etc/fail2ban so let's configure each file seperately.
/etc/fail2ban/ ├── action.d │ ├── iptables.conf │ ├── mail-whois.conf │ └── complain.conf ├── fail2ban.conf ├── filter.d │ ├── sshd.conf │ └── ........ └── jail.conf
fail2ban.conf
Contains general settings, such as the logging level and target