3 ms·
Why is it a must have? Just disable password logins on Internet-facing systems.
by api 5y ago
Why is it a must have? Just disable password logins on Internet-facing systems.
- exciteabletom 5y agoI should have been more explicit, you're right it's not necessary for SSH with keys. I was thinking more about preventing spam on web servers.
- _flux 5y agoI like to use it just to make logs more readable.
- cuspycode 5y agoI use it for ssh, ftp, and dovecot. Even with ssh passwords disabled, fail2ban reduces traffic a lot on some servers (since culprits get null-routed) which is always good.
- varjag 5y agoIt's great for HTTP as well. If there's something 404ing on your backend there's no reason not to ban it.
- staysafeanon 5y agoThis is why we enable port knocking (SPA) on all of our Internet-facing systems: it protects against zero-days and keeps the logs pristine. As a matter fact, any failed login of any kind creates a security alert.