I've setup Fail2Ban to use UFW actions to permanently ban IPs after 1 failed attempt. What seemed like a good idea are now causing me problems as I need to remove one IP among all those ufw rules.
When using sudo
ufw status numbered the terminal does not allow all those lines/pages to scroll through, which also would take forever, so I'm looking to find the correct command for
sudo ufw delete ....
Fail2ban inserts the following rule:
Anywhere REJECT IN xxx.xxx.xxx.xxx
I already tried
sudo ufw delete REJECT IN xxx.xxx.xxx.xxx and
sudo ufw delete RECEJCT IN from xxx.xxx.xxx.xxx to Anywhere
What is the correct ufw command/syntax to remove such rule when I know which IP to remove?
As a bonus question. Am I overdoing Fail2Ban / UFW by having a permanent ban after 1 failed attempts? What is a good practise to block all thous brute-force attempts on port SSH/22