The fail2ban jail that actually stops bot armies
Basic sshd jail bans for 10 min, then the same IP comes back forever. Enable the recidive jail: it watches fail2ban's own log and nukes repeat offenders for a week.
— [recidive]
— enabled = true
— bantime = 1w
— findtime = 1d
— maxretry = 5
IP gets banned 5 times in a day across any jail, it's gone for 7 days. My auth.log went from 3k lines a night to nearly silent. Try it tonight.
Root Access Daily
@RootAccessDaily
The fail2ban jail that actually stops bot armies
Этот пост опубликован в Telegram-канале Root Access Daily. Подписаться можно по ссылке: @RootAccessDaily.