2 ms·
> I harden ssh (no root login, no passwords), setup fail2ban for it and leave it at that. Similar here (but I allow root login), with the addition of setting u
by zepearl 4y ago
> I harden ssh (no root login, no passwords), setup fail2ban for it and leave it at that.
Similar here (but I allow root login), with the addition of setting up an nftables firewall with whitelisted ports and logging all the rest, and having fail2ban analyze logs and adding/removing to it IPs that become blacklisted because of some global limit is exceeded (which happens e.g. if you try once to access weird stuff stuff in my webserver VM + try to guess a pwd in the mailserver VM + try to login unsuccessfully into SSHd)