[lug] keeping up with attacks

[Zan Lynx]

On 5/4/2019 10:59 AM, Stephen Kraus wrote:
> SSH: No fail2ban? Just keep guessing till you win. No cert guessing or 
> sniffing needed. Public key eliminates some of that, but its still not 
> good practice to expose SSH.

Literally none of the Linux administrators I know personally run SSH 
with password auth enabled. As you say, that would be a bad idea.

With public / private keypairs or certificates you could keep guessing 
for eternity and never get in.

-- 
                 Knowledge is Power -- Power Corrupts
                         Study Hard -- Be Evil