2 ms·
> You may want to update this post to disable password authentication Probably not, as that’s one of the first things they do. That said, I feel like all this
by Semaphor 2y ago
> You may want to update this post to disable password authentication
Probably not, as that’s one of the first things they do.
That said, I feel like all this fail2ban stuff is very much cargo culting in the selfhosting community. I’ve had my VPS SSH server on port 22 with no fail2ban for slightly over a decade, exposed to the public internet (home server is behind tailscale, VPS hosts the stuff I always want accessible from everywhere). Bots try it, they fail, the end. Maybe I’m missing something, but I have yet to find a good reason for the added complexity.
- ftrobro 2y agoThis and possibly unknown similar flaws is a good reason for not advertising ssh: https://arstechnica.com/security/2024/07/regresshion-vulnerability-in-openssh-gives-attackers-root-on-linux/ https://arstechnica.com/security/2024/07/regresshion-vulnera...
- dingaling 2y agofail2ban is great for reducing clutter in logs. When I'm trying to debug something using auth.log I don't want to sift through 800 attempts by some IP to SSH in as root. It gives just enough info about the origin and nature of attempted intruders without overwhelming detail.