Initialising Workbench...
Visually build and export your fail2ban jail.local configuration.
Every tool runs entirely in your browser. Nothing you type is uploaded, stored, or logged on our servers.
The Fail2ban Jail Generator lets you visually build a production-ready jail.local configuration without memorising Fail2ban syntax. Configure global defaults, add multiple service jails (SSH, Nginx, Apache, etc.), and instantly preview the generated config. When ready, copy it to your clipboard or download as jail.local to deploy directly on your server.
Fail2ban is an intrusion prevention tool that monitors log files for suspicious patterns — like repeated failed login attempts — and automatically blocks the offending IP address using your firewall. It's commonly used to protect SSH, web servers, mail servers, and more against brute-force attacks.
jail.local, place it at /etc/fail2ban/jail.local and restart Fail2ban with sudo systemctl restart fail2ban. Check active jails with sudo fail2ban-client status.It creates Fail2ban jail configuration blocks from your chosen filter, ports, ban time, and retry settings, so you can protect services from brute-force attacks.
No. The jail config is generated entirely client-side in your browser, so your settings stay private on your machine.
Paste it into a file under jail.d (for example /etc/fail2ban/jail.d/custom.conf) or into jail.local, then reload Fail2ban to apply it.
maxretry is how many failures are allowed within findtime before a host is banned, and bantime is how long that ban lasts.
No. It only generates configuration text. The actual banning is done by your own Fail2ban service running on your server.