4 ms·
The big win for me is that it cuts down log noise from ssh brute force attempts. Used with pf/netfilter you get even less. I'm not sure of getting FreeBSD nig
by nieve 11y ago
The big win for me is that it cuts down log noise from ssh brute force attempts. Used with pf/netfilter you get even less. I'm not sure of getting FreeBSD nightly security reports that freeze a mail client for a few seconds as they render and sshguard cuts that down to a manageable block message.
- MichaelGG 11y agoSo don't log those things or especially don't email them? They're obviously not providing useful or actionable information. Just seems like the hassle of getting locked out far outweighs the reduction in a log you're not really monitoring anyways. And doesn't moving ports also kill that junk traffic?