fail2ban is a protection against brute-force that locks a user out after a definable maximum failed login-attempts.
But if a user already has access to a server with another username already fail2ban is not active anymore from the inside, so you have infinite tries to brute-force with
into another useraccount.
- Is there a tool I could install on linux that kicks a user after a number of failed local ssh-login attempts?
- And how do I have to configure it so a user gets kicked after 10 false attempts?