4 ms·
As you correctly point out, password authentication should not be used for SSH to begin with, but more importantly fail2ban is not a piece of software written t
by hnarn 4y ago
As you correctly point out, password authentication should not be used for SSH to begin with, but more importantly fail2ban is not a piece of software written to stop brute force password attacks, it’s a very general tool for triggering network blocking actions based on specific patterns found in logs.
My only point being that there are some great use cases for fail2ban, and while this isn’t one of them it’s important to remember that this does not make fail2ban a misdirected or useless security initiative by default, in case anyone gets that impression from reading these comments.
- hsbauauvhabzb 4y agoIt doesnt stop determined attackers who have access to a botnet, but it does stop low sophistication attacks. If brute forcing anything is a concern then addressing that concern should come first, focusing effort on fail2ban is a cost that is probably better spent elsewhere.