2 ms·
Not a good idea for two reasons: 1) The very first configuration change anybody should be making to an SSH server should be disabling password-based authe
by traceroute66 5y ago
Not a good idea for two reasons:
1) The very first configuration change anybody should be making to an SSH server should be disabling password-based authentication. Once you've done that you've rendered fail2ban obsolete, because the only real way in for attackers from that point in is via software security vulnerabilities, and fail2ban can't help you with that, that's your job to keep yourself patched up.
2) In an IPv6 world, fail2ban is pointless. The ranges are so vast.