New guide: Fail2ban for Bitcoin and Lightning nodes.
UFW closes the ports you did not open.
Fail2ban watches the ports you did.
What's in the guide:
β Complete jail.local from scratch β no editing jail.conf
β SSH jail tuned for node operators (3 failures, 28-day ban)
β Custom filter for LND REST API authentication failures
β Custom filter for Bitcoin Core RPC abuse
β Recidive jail β 1-year ban for IPs that come back after expiry
β bantime.increment β each re-offense doubles the ban
β UFW integration fix for Ubuntu 24 (the banaction = ufw issue most guides miss)
β How to test filters with fail2ban-regex before going live
β How to whitelist your own IP so you don't lock yourself out
The recidive jail is the one most people skip. Set it up.
An IP that comes back after 28 days deserves a year off.
Guide:
#bitcoin #lightning #linux #opsec #sovereignty #selfhosted
GitHub
sovereign-linux-tools/guides/fail2ban.md at main Β· shadowbipnode/sovereign-linux-tools
Practical guides for sovereign, private, and self-hosted Linux setups. Encryption, node operation, key management, network hardening. - shadowbipno...


