> They are schoolboy errors in a relatively trivial piece of software that very well demonstrate the fundamental security flaw in its design. I read through th

> They are schoolboy errors in a relatively trivial piece of software that very well demonstrate the fundamental security flaw in its design. I read through the CVEs and they're not 'schoolboy errors' at all - in fact, the first one doesn't even refer to fail2ban itself but to a program being called by fail2ban. There's no fundamental security flaw in its design. > Recommended by whom? The Internet, or prominent experts in the field? It's recommended in several linux/unix books - physical books, written by experts - and in many blogs. So, both.