News for hackers. Stuff that matters.
Re:Fail2ban Sucks by fbdab103 on Monday January 01, 2024 @07:05PM (#38836521)
I feel similarly. Switching ports is no real defense, but it at least means you are eliminating the drive-by attacks who are only interested in the trivially exploited. Such a simple thing to do and sharply reduces the log volume.

The next trick I think of implementing is port knocking. Should drop log noise to zero unless someone starts targeting me specifically. In which case, my goose is already cooked.

Re:Fail2ban Sucks by yjftsjthsd-h on Monday January 01, 2024 @07:37PM (#38836730)
> The next trick I think of implementing is port knocking.

If you're at that point, I would suggest putting it behind wireguard.