3 ms·
I run endlessh on the port 2222 and I configured fail2ban to redirect the source ip addresses who did X failed attempts from the dest port 22 to the dest port 2
by ycombinatorrio 3y ago
I run endlessh on the port 2222 and I configured fail2ban to redirect the source ip addresses who did X failed attempts from the dest port 22 to the dest port 2222 transparently.
I use the table NAT and prerouting to achieve that, you can use ipset to match the source ip addresses.
- withinboredom 3y agoI do something similar except send them bytes from /dev/random, providing free protocol fuzzing.
- pdimitar 3y agoOh nice, do you have a blog post detailing it step by step?