How to Harden a Linux SSH Server (Port + Firewall + Fail2Ban)

Published: 21 July 2025
on channel: The Swedish Sysadmin

517

In this quick tutorial, I’ll show you how to secure your SSH server on Ubuntu in 2025 by:

✅ Changing the default SSH port
✅ Using UFW to allow only trusted IPs
✅ Installing and configuring Fail2Ban to block brute-force attacks

💡 By the end, your server will be much more secure from automated bots and port scanners.

🔧 Tools used:
sshd_config for port change
ufw (Uncomplicated Firewall)
fail2ban with custom jail.local config

🔐 Recommended for VPS, home labs, and production servers.
👉 Don’t forget to subscribe for more sysadmin tips and secure server setups!

0:00 Video Overview
1:00 Change SSH port
3:21 Allow/deny SSH in Firewall
7:05 Install and config of Fail2Ban

#SSH #ServerSecurity #Fail2Ban #UFW #LinuxSecurity #SSHHardening #CyberSecurity #SysAdmin #Ubuntu #Debian #LinuxTips #SecureSSH #Port1337 #Firewall #ServerHardening

On this page of the site you can watch the video online How to Harden a Linux SSH Server (Port + Firewall + Fail2Ban) with a duration of hours minute second in good quality, which was uploaded by the user The Swedish Sysadmin 21 July 2025, share the link with friends and acquaintances, this video has already been watched 517 times on youtube and it was liked by 23 viewers. Enjoy your viewing!

37,384

1.6K

00:00:00