1. Install
Install fail2ban from repo or SBo.
2. Config
Create /etc/fail2ban/jail.local with an sshd jail.
3. Start
Start the service using rc script or manually.
4. Verify
fail2ban-client status sshdQuick checklist
[ ] Steps completed
[ ] Config updated
[ ] Service tested
[ ] Restart/rollback ready
[ ] Logs checked