4 ms·
> at worst, fail2ban: causes you massive inconvinience or total lockout [...] it'll probably block you out. I agree that fail2ban is useless once you've disabl
by michaelt 3y ago
> at worst, fail2ban: causes you massive inconvinience or total lockout [...] it'll probably block you out.
I agree that fail2ban is useless once you've disabled password login, which you should have done.
But is anyone really getting locked out of their own systems by fail2ban unless they're doing something pretty weird? I thought it gave you about 5 password attempts, and then blocked you for 10 minutes - doesn't seem that draconian to me.
- kleiba 3y agoIn one of my previous jobs, it blocked me out after 3 attempts indefinitely - that is, until I got a hold of the sysadmin and asked him to unblock me. It was a PITA, as you can imagine. And I don't understand why any sysadmin would want to put themselves in a position to get bothered regularly by people who tend to mistype their passwords like me.
- Scaevolus 3y agoThe default configuration of fail2ban on Debian considers every offered key as a login attempt, so you can be immediately banned for merely connecting with too many keys in your ~/.ssh.
- baz00 3y agoNever been locked out when I used to use it. But it got replaced with a default firewall rule to only allow SSH from my address in the end. Didn’t need it at all then!