Securing your Linux web server

Re:Securing your Linux web server by brobinson on Tuesday February 20, 2018 @11:26AM (#16421490)

You should be using public key authentication: https://www.digitalocean.com/community/tutorials/how-to-set-...

If you insist on using passwords, make sure you at least install something like fail2ban or denyhosts to block the compromised machines which are hammering your server trying to guess passwords. Clients can see which authentication methods are allowed so they know which machines to attack (i.e., yours, if you allow passwords).

[ Parent | on HN ]

Re:Securing your Linux web server by MertsA on Tuesday February 20, 2018 @12:01PM (#16421816)

Or for something even cleaner than a program trying to parse plaintext logs you can use a PAM module. https://wiki.archlinux.org/index.php/Pam_abl

[ Parent | on HN ]

Re:Securing your Linux web server by adfskjldsjfk on Tuesday February 20, 2018 @08:47PM (#16426149)

How would you compare it with fail2ban?

[ Parent | on HN ]