beenull/power-mailinabox
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Revert to default FAIL2BAN findtime for SSH jail

Browse source 
I propose that the default 600s/10minute find time is a better test duration for this ban. The altered 120s findtime sounds reasonable until you consider that attackers can simply throttle to 3 attempts per minute and never be banned.

The remaining non default jail settings of maxretry = 7 and bantime = 3600 I believe are good.
This commit is contained in:
anoma 2015-09-07 08:36:59 +01:00
parent 42d657eb54
commit ae3ae0b5ba
1 changed files with 0 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
conf/fail2ban/jail.local
View file

@ -4,7 +4,6 @@
[ssh]
maxretry = 7
findtime = 120
bantime = 3600
[ssh-ddos]