Increase security defenses against brute-force attacks #61

Closed
opened 2021-10-29 22:34:38 +00:00 by a · 2 comments
Owner

With #58 and #60 exposing services like SSH and RDP on standard ports, it's important that we step up our security to prevent brute-force attacks. Maybe something like Fail2ban would be a good idea.

With #58 and #60 exposing services like SSH and RDP on standard ports, it's important that we step up our security to prevent brute-force attacks. Maybe something like [Fail2ban](https://www.fail2ban.org/wiki/index.php/Main_Page) would be a good idea.
a added this to the v5.0 milestone 2021-10-29 22:34:38 +00:00
a added the
help wanted
enhancement
security
labels 2021-10-29 22:34:38 +00:00
a added this to the (deleted) project 2021-10-29 22:34:38 +00:00
Author
Owner
This has a lot of good suggestions: https://security.stackexchange.com/questions/110706/am-i-experiencing-a-brute-force-attack
Author
Owner

The default OpenSSH configuration is actually already pretty resistant to brute-force attacks. No accounts except for the normal user accounts have login shells, and root login requires a public key, so our setup should be quite secure.

The default OpenSSH configuration is actually already pretty resistant to brute-force attacks. No accounts except for the normal user accounts have login shells, and root login requires a public key, so our setup should be quite secure.
a closed this issue 2021-11-03 00:38:39 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: exozyme/exozyme#61
No description provided.