4 ms·
I do the same, but only 10 minutes after 5 failed logins. That's enough for bots while not really getting in your way if it accidentally blocks the hotel you're
by t0mas88 5y ago
I do the same, but only 10 minutes after 5 failed logins. That's enough for bots while not really getting in your way if it accidentally blocks the hotel you're in.
Combined with only allowing key based login, password is disabled.
- _moof 5y agoI've recently added 2FA as well. Super easy to do.
- alias_neo 5y agoI wrote a blog on how to do it a couple years back if anyone is interested in a "tutorial": https://2byt.es/post/totp/ https://2byt.es/post/totp/ It's for the Pi as that's the target audience but it should apply generally for OpenSSH. There's also a sister post about improving your "first factor" for those still using passwords: https://2byt.es/post/totp2/ https://2byt.es/post/totp2/