3 ms·
Anybody know what the deal with blacklistd is? I googled and finally found the man page, but it's not immediately apparent why one might choose using it over us
by SwellJoe 9y ago
Anybody know what the deal with blacklistd is? I googled and finally found the man page, but it's not immediately apparent why one might choose using it over using something like fail2ban (which works for any service and can block all ports, not just ssh)?
- petre 9y agoIt listens on a socket for failed login notifications from other daemons. I'd say this approach is better than what fail2ban does (scans logs with regexps), but it has to be supported upstream so the daemons actually notify blacklistd.
- emaste 9y agoThe FreeBSD Foundation's projects update from earlier this year has an introductory summary: https://www.freebsdfoundation.org/blog/february-2017-projects-update/ https://www.freebsdfoundation.org/blog/february-2017-project...
- jlgaddis 9y agoHere's a (~24m) talk by the author about blacklistd at the last vBSDcon: https://m.youtube.com/watch?v=fuuf8G28mjs https://m.youtube.com/watch?v=fuuf8G28mjs To me, it seems kinda novel but I can't see myself ever using it across my production servers.