fail2ban
Reddit take
Not enough linked mention summaries yet; the source excerpts below are the evidence.
Pros
- I have fail2ban setup on each client with a custom script so a ban is propagated to the proxy too.
- Fail2ban is great. A good combo is CrowdSec and fail2ban
- For some services I additionally use Basic Auth; this is monitored by fail2ban/crowdsec, and failed attempts get banned.
- If one of your services has a login page and you don't have MFA, they could potentially brute force it (which is why a lot of people recommend fail2ban).
- fail2ban with a very strict rules, etc.
Cons
- Security: crowdsec ori fail2ban. But neither will help in case of a 0 day exploit like the recent react shit.
- fail2ban is also something you should check out. It watches for failed login attempts and firewalls them.
- I no longer need fail2ban as Cloudflare will take care of all of that as part of the WAF.
Sentiment
7 positive (70%) · 3 mixed (30%) · 0 negative (0%)
Trust + time weighted score: +70% · raw score 70%
What redditors said (10 of 10)
I have fail2ban setup on each client with a custom script so a ban is propagated to the proxy too.
Fail2ban is great. A good combo is CrowdSec and fail2ban
For some services I additionally use Basic Auth; this is monitored by fail2ban/crowdsec, and failed attempts get banned.
Security: crowdsec ori fail2ban. But neither will help in case of a 0 day exploit like the recent react shit.
fail2ban is also something you should check out. It watches for failed login attempts and firewalls them.
If one of your services has a login page and you don't have MFA, they could potentially brute force it (which is why a lot of people recommend fail2ban).
fail2ban with a very strict rules, etc.
Hardening linux with SSH, IPtables, Fail2ban, etc..
Have you looked at CrowdSec or Fail2Ban? IIRC these security tools might help you to nail down malicious actors that are knocking up too often at your door.
I no longer need fail2ban as Cloudflare will take care of all of that as part of the WAF.
Compare
fail2ban vs Tailscalefail2ban vs Home Assistantfail2ban vs ZFS