Re:How to secure an Ubuntu Apache web server
by xaphod on Monday December 26, 2011 @02:26AM
(#3392458)
I hate the praise that fail2ban gets. It is useful, but it is not securing anything really, unless maybe you run a public ssh box that has other users who have bad passwords. It will keep the logs cleaner though. A better way to secure SSH on a web server would be to restrict access by firewall and/or disallow password logins.
[ Parent
| on HN ]
Re:How to secure an Ubuntu Apache web server
by orthecreedence on Monday December 26, 2011 @04:59AM
(#3392650)
Agreed, password SSH logins belong nowhere on a box that needs to be secured. Shared key authentication (with a passworded private key) is a lot more secure.