SSH port - Fail2Ban

[Ghillie-up]

Why does Vesta inject a rule in to IP tables -

-A fail2ban-SSH -s 195.x.x.x/32 -j REJECT --reject-with icmp-port-unreachable

However it doesn't block SSH. I change the port by default. So have been looking at config but unsure on what to change.

[skurudo]

-A fail2ban-SSH -s 195.x.x.x/32 -j REJECT --reject-with icmp-port-unreachable
However it doesn't block SSH. I change the port by default. So have been looking at config but unsure on what to change.

It does block SSH, for IP. it's your IP - 195.x.x.x/32? How do you check then?

[Ghillie-up]

Because I can still SSH to the box from that IP.

I also have a jump server i use for connectivity and viewing logs on a different IP in case it locks me out.