Hot take: pf's built-in connection tracking beats fail2ban/sshguard hands down.
Uncategorized
1
Posts
1
Posters
0
Views
-
Hot take: pf's built-in connection tracking beats fail2ban/sshguard hands down.
One simple ruleset gives you automatic brute-force protection with ZERO userland daemons. No log parsing, no reaction delays, no additional attack surface.
table <bruteforce> persist
pass in proto tcp to port 22 flags S/SA (max-src-conn 5, max-src-conn-rate 3/30, overload <bruteforce> flush global)Kernel-level enforcement, instant blocking, survives reboots with persist.
Why spawn Python processes when your firewall already knows?
-
undefined Stefano Marinelli shared this topic
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@MichelPatrice un ENORME merci à toi Michel pour tous tes excellents conseils ✨ 🏆 ✨
-
@MichelPatrice 😂 💀
-
@mala aw! thank you for the kind offer Davide.
In my pre-mom days I would have booked a flight to Milano stat, but alas cannot do it now on such short notice for my family. Thank you though, I really appreciate! ❤️
-
Ma quanto era illuminata la musica del canale delle previsioni del tempo del Wii?
-
@kr4ft3r noice
-
@celestia but there's games and stuff tho :O
-
@aeva mine can pirate movies
-
@Alberto 😂 è molto molto cool
