3 ms·
Yup this is normal, when I can't change the SSH port (e.g for compatibility) then I switch f2b to permanently ban, which should reduce any incurred load by blac
by tomxor 7y ago
Yup this is normal, when I can't change the SSH port (e.g for compatibility) then I switch f2b to permanently ban, which should reduce any incurred load by black-holing instead of attempting authentication as the list grows more comprehensive over time (this wont affect other services e.g apache, in-case a user is unwittingly part of a botnet).
- pnutjam 7y agoFatfingered typist beware...
- tomxor 7y agohah, i also tend to up the attempts... If you have more than one server you can always tunnel through one of the others if you lock yourself out. Worst case of course VPS console.
- jaster 7y agoBetter use a password manager in this case (or even better, use public key auth!)
- deleted 7y ago[deleted]