Hello and thanks for advise and link to testing ports .
in fact , port 22 is not reachable by others
it is really sufficient to protect pi against attack ? and others computers ?
in my router , i ' ve done a port forwarding , just in case

, i ' ve checked too , and seem to be not reachable .
so it seems all be ok at this point and the SSH configuration seems to be not accessible for others so problem solved !
Now , on my pi , i' ve done a html site , of course it is open on pi local port 80 .
on the router , i've done a port forwarding too fo this service . it is working like a charm , but it is totaly open .
this site is just to command doors ti ti written in PHP
i protect acces with a username and password .
i would like to configure fail2ban with http acces to limite btuteforce attack on it .
i' ve tried more things but seems to not working :
Code: Select all
pi@raspberrypi:~ $ sudo fail2ban-client status
Failed to access socket path: /var/run/fail2ban/fail2ban.sock. Is fail2ban running?
pi@raspberrypi:~ $
in the file /etc/fail2ban/jail.conf the first lines are :
YOU SHOULD NOT MODIFY THIS FILE
so i'm looking for a tutorial explaining how to create a specific conf file for the http service in directory /etc/fail2ban/jail.d/
during this time , i've taking a look at the dedicated fail2ban documentation .
Thanks to all for yours time and response !