4 ms·
If you must then just limit connections per minute that can be opened per address to the sshd port in the host firewall instead. Sshd should be configured to cl
by swinglock 13y ago
If you must then just limit connections per minute that can be opened per address to the sshd port in the host firewall instead. Sshd should be configured to close the connection after a number of failed logins. Now you get the same effect without a daemon parsing logfiles.
- bradleyland 13y agoI recently added UFW configuration to my provisioning scripts, so we now use UFW's 'limit' rules to do that on the port we use for SSH. We could probably get away with moving it back to the default with this in place.