3 ms·
This is why I run `fail2ban` on my pi.
by jachee 5y ago
This is why I run `fail2ban` on my pi.
- spydum 5y agoIf I know the default login, how would fail2ban help you? Doesn't it mine only the failures?
- jachee 5y agoRight, I changed the default, and now I ban anyone who tries it.
- Brian_K_White 5y agoThen what's making a difference for you is that you changed a default name or password. fail2ban is nice and all, but irrelevant to this post about a default login.
- jachee 5y agoI guess I should’ve said “Scripts like this…” instead of just “This”. My entire point being that any client that tries a default account should be insta-banned. That’s what I get from this.
- Brian_K_White 5y agostout policy
- stjohnswarts 5y agofail2ban wouldn't help as he used the default password, it would have let him in. All you have to do is change the password or force key only logins (which is what most security conscious people do)
- oynqr 5y agofail2ban is such a clumsy solution when one can just disable password authentication and change the default port.
- kmbfjr 5y agoIt is. If you really want to get after the password scans, iptables and connection tracking. After N number of new connection requests, drop for X minutes. Any IPs that are trusted, put ahead of that logic.