Re:How I spend my first 5 minutes on a server
by vacri on Monday March 04, 2013 @01:41AM
(#5317008)
fail2ban is useful for things other than SSH - I've seen it deal handily with people probing our asterisk server.
[ Parent
| on HN ]
Re:How I spend my first 5 minutes on a server
by tuzakey on Monday March 04, 2013 @07:45PM
(#5322107)
agreed, you can set up fancy jails for people scanning other services too, someone who probes SMTP/POP/IMAP doesn't need to hit SIP and SSH. Depending on the scenario you could choose to say block an entire netblock from hitting ssh after a single offensive IP probes a few services. Even a 10min jail time will cause most attackers to give up and move along to their next victim (unless you're being targeted.)