2 ms·
Genuine question: Why not just tell the daemon to stop logging failed attempts? I personally have a hard time reconciling local username+password authentication
by zamadatix 3y ago
Genuine question: Why not just tell the daemon to stop logging failed attempts? I personally have a hard time reconciling local username+password authentication and the need to audit failed attempts in the same use case but that may just be because I haven't run across the right use case.
- justsomehnguy 3y agoIf someone would fail to properly code something you can find your basic auth is slow to a crawl or even not responding but you would have no idea what is going on. [0] ie Morris worm
- GuB-42 3y agoThe simplest reason is that installing fail2ban is just as easy. Also, I sometimes want to know about failed attempts, mostly for legitimate attempts that failed and shouldn't have. As in: "why couldn't bob connect the the server?", and failed attempts would just show that he used the wrong password, or at least, that it is a password related problem.