{"id":191,"date":"2026-05-15T18:39:43","date_gmt":"2026-05-15T16:39:43","guid":{"rendered":"https:\/\/gorankostic.com\/blog\/?p=191"},"modified":"2026-05-15T18:39:43","modified_gmt":"2026-05-15T16:39:43","slug":"fail2ban-hardening","status":"publish","type":"post","link":"https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/","title":{"rendered":"Fail2Ban Hardening"},"content":{"rendered":"\n

Fail2Ban Hardening<\/h2>\n\n\n\n

Excerpt:<\/strong>
Fail2Ban hardening poma\u017ee da se server za\u0161titi od ponovljenih neuspe\u0161nih login poku\u0161aja, brute-force napada i automatizovanog skeniranja. Pravilno pode\u0161en Fail2Ban smanjuje rizik od kompromitovanja SSH, mail, FTP, Webmin i drugih javno dostupnih servisa.<\/p>\n\n\n\n

Blog \u010dlanak:<\/strong><\/p>\n\n\n\n

Fail2Ban je jedan od najkorisnijih sigurnosnih alata na Linux serverima, posebno kada se server koristi za hosting vi\u0161e sajtova, mail naloga i administrativnih servisa. Njegova osnovna uloga je da prati logove i automatski blokira IP adrese koje pokazuju sumnjivo pona\u0161anje.<\/p>\n\n\n\n

Naj\u010de\u0161\u0107i primer su ponovljeni neuspe\u0161ni SSH login poku\u0161aji. Botovi neprestano skeniraju javne servere i poku\u0161avaju pristup kroz poznate korisni\u010dke naloge, slabe lozinke ili automatizovane kombinacije. Fail2Ban mo\u017ee takve poku\u0161aje brzo prepoznati i privremeno ili trajno blokirati napada\u010dku IP adresu.<\/p>\n\n\n\n

Hardening ne zna\u010di samo instalirati Fail2Ban i ostaviti podrazumevana pode\u0161avanja. Va\u017eno je pa\u017eljivo podesiti jail pravila, broj dozvoljenih poku\u0161aja, vremenski period posmatranja i trajanje bana. Previ\u0161e blaga pravila mogu biti neefikasna, dok previ\u0161e stroga pravila mogu gre\u0161kom blokirati legitimne korisnike.<\/p>\n\n\n\n

SSH za\u0161tita je obi\u010dno prvi korak. Fail2Ban treba kombinovati sa jakim SSH pode\u0161avanjima: zabranom root login-a, kori\u0161\u0107enjem SSH klju\u010deva, promenom slabih lozinki i ograni\u010davanjem pristupa samo korisnicima kojima je zaista potreban. Fail2Ban je dodatni sloj, ne zamena za dobru osnovnu konfiguraciju.<\/p>\n\n\n\n

Kod hosting servera, mail servisi su posebno va\u017eni. Postfix, Dovecot i SMTP authentication \u010desto su meta brute-force poku\u0161aja. Ako se mail logovi redovno pune neuspe\u0161nim poku\u0161ajima prijave, Fail2Ban jail pravila za mail servise mogu zna\u010dajno smanjiti optere\u0107enje i rizik.<\/p>\n\n\n\n

Webmin i Virtualmin tako\u0111e treba za\u0161tititi. Administrativni paneli su osetljive ta\u010dke jer omogu\u0107avaju \u0161iroku kontrolu nad serverom. Fail2Ban mo\u017ee pratiti neuspele login poku\u0161aje i blokirati IP adrese koje poku\u0161avaju pristup panelu bez validnih podataka.<\/p>\n\n\n\n

FTP i ProFTPD servisi, ako se koriste, tako\u0111e zahtevaju pa\u017enju. Iako je SFTP \u010desto bolji izbor, mnogi hosting sistemi i dalje imaju FTP podr\u0161ku. Fail2Ban pravila za FTP mogu spre\u010diti veliki broj automatizovanih poku\u0161aja pristupa starim ili slabim nalozima.<\/p>\n\n\n\n

Va\u017eno je redovno proveravati aktivne banove i logove. Administracija Fail2Ban-a ne zavr\u0161ava se konfiguracijom. Povremeni pregled pokazuje da li pravila rade, koji servisi su najvi\u0161e napadani i da li treba prilagoditi trajanje bana ili pragove za blokiranje.<\/p>\n\n\n\n

Treba biti oprezan sa sopstvenom IP adresom i IP adresama klijenata. Kod stro\u017eih pode\u0161avanja korisno je imati whitelist za pouzdane adrese, posebno ako se administracija servera obavlja sa stalne lokacije. Time se smanjuje rizik da administrator gre\u0161kom izgubi pristup serveru.<\/p>\n\n\n\n

Fail2Ban hardening je prakti\u010dan i efikasan deo server sigurnosti. Kada je pravilno pode\u0161en, on smanjuje broj napada koji sti\u017eu do servisa, rastere\u0107uje logove i daje serveru dodatni sloj za\u0161tite koji je posebno va\u017ean u dugoro\u010dnom produkcionom radu.<\/p>\n","protected":false},"excerpt":{"rendered":"

Fail2Ban hardening poma\u017ee da se server za\u0161titi od ponovljenih neuspe\u0161nih login poku\u0161aja, brute-force napada i automatizovanog skeniranja. Pravilno pode\u0161en Fail2Ban smanjuje rizik od kompromitovanja SSH, […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,9],"tags":[],"class_list":["post-191","post","type-post","status-publish","format-standard","hentry","category-infrastructure","category-server-administration"],"yoast_head":"\nFail2Ban Hardening - Goran Kostic Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Fail2Ban Hardening\" \/>\n<meta property=\"og:description\" content=\"Fail2Ban hardening poma\u017ee da se server za\u0161titi od ponovljenih neuspe\u0161nih login poku\u0161aja, brute-force napada i automatizovanog skeniranja. Pravilno pode\u0161en Fail2Ban smanjuje rizik od kompromitovanja SSH, […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/\" \/>\n<meta property=\"og:site_name\" content=\"Goran Kostic Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-15T16:39:43+00:00\" \/>\n<meta name=\"author\" content=\"WebixDesign\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WebixDesign\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/2026\\\/05\\\/15\\\/fail2ban-hardening\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/2026\\\/05\\\/15\\\/fail2ban-hardening\\\/\"},\"author\":{\"name\":\"WebixDesign\",\"@id\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/#\\\/schema\\\/person\\\/0f800bfa90359ff9d2204020d58099c8\"},\"headline\":\"Fail2Ban Hardening\",\"datePublished\":\"2026-05-15T16:39:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/2026\\\/05\\\/15\\\/fail2ban-hardening\\\/\"},\"wordCount\":501,\"commentCount\":0,\"articleSection\":[\"INFRASTRUCTURE\",\"Server Administration\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/gorankostic.com\\\/blog\\\/2026\\\/05\\\/15\\\/fail2ban-hardening\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/2026\\\/05\\\/15\\\/fail2ban-hardening\\\/\",\"url\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/2026\\\/05\\\/15\\\/fail2ban-hardening\\\/\",\"name\":\"Fail2Ban Hardening - Goran Kostic Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/#website\"},\"datePublished\":\"2026-05-15T16:39:43+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/#\\\/schema\\\/person\\\/0f800bfa90359ff9d2204020d58099c8\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/2026\\\/05\\\/15\\\/fail2ban-hardening\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/gorankostic.com\\\/blog\\\/2026\\\/05\\\/15\\\/fail2ban-hardening\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/2026\\\/05\\\/15\\\/fail2ban-hardening\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Fail2Ban Hardening\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/\",\"name\":\"Goran Kostic Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/#\\\/schema\\\/person\\\/0f800bfa90359ff9d2204020d58099c8\",\"name\":\"WebixDesign\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0b4c4d73af3b6d4c23d5191555e82cdc78a86604f69eae8d2c3d23e45d3967c5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0b4c4d73af3b6d4c23d5191555e82cdc78a86604f69eae8d2c3d23e45d3967c5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0b4c4d73af3b6d4c23d5191555e82cdc78a86604f69eae8d2c3d23e45d3967c5?s=96&d=mm&r=g\",\"caption\":\"WebixDesign\"},\"sameAs\":[\"https:\\\/\\\/gorankostic.com\\\/blog\"],\"url\":\"https:\\\/\\\/gorankostic.com\\\/blog\\\/author\\\/webixdesign\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Fail2Ban Hardening - Goran Kostic Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/","og_locale":"en_US","og_type":"article","og_title":"Fail2Ban Hardening","og_description":"Fail2Ban hardening poma\u017ee da se server za\u0161titi od ponovljenih neuspe\u0161nih login poku\u0161aja, brute-force napada i automatizovanog skeniranja. Pravilno pode\u0161en Fail2Ban smanjuje rizik od kompromitovanja SSH, […]","og_url":"https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/","og_site_name":"Goran Kostic Blog","article_published_time":"2026-05-15T16:39:43+00:00","author":"WebixDesign","twitter_card":"summary_large_image","twitter_misc":{"Written by":"WebixDesign","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/#article","isPartOf":{"@id":"https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/"},"author":{"name":"WebixDesign","@id":"https:\/\/gorankostic.com\/blog\/#\/schema\/person\/0f800bfa90359ff9d2204020d58099c8"},"headline":"Fail2Ban Hardening","datePublished":"2026-05-15T16:39:43+00:00","mainEntityOfPage":{"@id":"https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/"},"wordCount":501,"commentCount":0,"articleSection":["INFRASTRUCTURE","Server Administration"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/","url":"https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/","name":"Fail2Ban Hardening - Goran Kostic Blog","isPartOf":{"@id":"https:\/\/gorankostic.com\/blog\/#website"},"datePublished":"2026-05-15T16:39:43+00:00","author":{"@id":"https:\/\/gorankostic.com\/blog\/#\/schema\/person\/0f800bfa90359ff9d2204020d58099c8"},"breadcrumb":{"@id":"https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/gorankostic.com\/blog\/2026\/05\/15\/fail2ban-hardening\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/gorankostic.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Fail2Ban Hardening"}]},{"@type":"WebSite","@id":"https:\/\/gorankostic.com\/blog\/#website","url":"https:\/\/gorankostic.com\/blog\/","name":"Goran Kostic Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/gorankostic.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/gorankostic.com\/blog\/#\/schema\/person\/0f800bfa90359ff9d2204020d58099c8","name":"WebixDesign","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/0b4c4d73af3b6d4c23d5191555e82cdc78a86604f69eae8d2c3d23e45d3967c5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/0b4c4d73af3b6d4c23d5191555e82cdc78a86604f69eae8d2c3d23e45d3967c5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0b4c4d73af3b6d4c23d5191555e82cdc78a86604f69eae8d2c3d23e45d3967c5?s=96&d=mm&r=g","caption":"WebixDesign"},"sameAs":["https:\/\/gorankostic.com\/blog"],"url":"https:\/\/gorankostic.com\/blog\/author\/webixdesign\/"}]}},"_links":{"self":[{"href":"https:\/\/gorankostic.com\/blog\/wp-json\/wp\/v2\/posts\/191","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gorankostic.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gorankostic.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gorankostic.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gorankostic.com\/blog\/wp-json\/wp\/v2\/comments?post=191"}],"version-history":[{"count":1,"href":"https:\/\/gorankostic.com\/blog\/wp-json\/wp\/v2\/posts\/191\/revisions"}],"predecessor-version":[{"id":192,"href":"https:\/\/gorankostic.com\/blog\/wp-json\/wp\/v2\/posts\/191\/revisions\/192"}],"wp:attachment":[{"href":"https:\/\/gorankostic.com\/blog\/wp-json\/wp\/v2\/media?parent=191"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gorankostic.com\/blog\/wp-json\/wp\/v2\/categories?post=191"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gorankostic.com\/blog\/wp-json\/wp\/v2\/tags?post=191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}