4 ms·
Show HN: Prevent failed login attempts on your Linux server
- throwaway888abc 6y agoOn same problem/solution also see more straightforward Fail2Ban https://gist.github.com/joecampo/848178ab5c18aada0eab https://gist.github.com/joecampo/848178ab5c18aada0eab
- cryo 6y agofail2ban is such a great software and flexible. I'm using it to protect ssh and nginx with specific rules to block php and cgi requests (since my site is purely static).
- prashantgupta24 6y agoYep fail2ban is indeed a great alternative way to tackle the issue. Although fail2ban works by blocking specific IPs. If the brute force specifies a new IP for each attempt, I'm not sure how that will be handled by fail2ban
- totetsu 6y agoIf we want to prevent failed login attempts, dont we have to make all logins succeed?
- prashantgupta24 6y agoI'm sorry I didn't quite understand that point. All logins are going to fail unless we talk to the REST server that's controlling the firewalld rules.