This question already has an answer here:
I need to lock the users that are trying to log in via SSHD after 5 unsuccessful login tries. I already googled for it, but I just can see it working:
root@server:~# faillog -u testuser Login Failures Maximum Latest On testuser 0 0
The Maximum faillog is always 0 for a reason...
QUESTION: What packages do I need to have installed? What settings do I have to make? I know that I must have "UsePAM yes" in the sshd_config, that's OK. Does it counts that where am I putting the PAM lines in ex.: system-auth?