Re:Salt: Like Puppet, Except It Doesn’t Suck
by antihero on Monday June 24, 2013 @07:06PM
(#5936328)
If someone knows your IP, can't they spoof the packets and get you banned from your own server? Or did they solve this issue somehow already?
[ Parent
| on HN ]
The ssh authentication works over TCP which isn't realistically spoofable because to open a connection (which you need first, before you can fail to authenticate ssh), you need to be able to receive the response packets to your spoofed sender address
Re:Salt: Like Puppet, Except It Doesn’t Suck
by nuclear_eclipse on Monday June 24, 2013 @08:16PM
(#5936628)
a) This was suggested as a method to combat random trolling from botnets, so this sort of response is highly unlikely unless you're already getting DDOS'd [1], and b) Fail2Ban allows you to whitelist some IP's that won't be banned, if you really need to protect against that sort of attack.
1: at which point you'd most likely need to be a lot more involved anyways, and you should most likely be running something more serious in front of your server anyways...