27 Jan
2011
27 Jan
'11
3:40 p.m.
Always Learning wrote:
On Thu, 2011-01-27 at 10:27 -0500, m.roth@5-cent.us wrote:
Security through obscurity doesn't work.
It certainly helps defeat most potential intruders but not the most determined. IPtables does help too.
We also run fail2ban at work. Very nice, installs (along with shorewall), and creates a temporary blacklist, blocking an IP that's tried five, I think, times to break in. All configurable, btw. <snip>
Restricted to a few IP addresses is good; the fewer the better.
Currently 3 static IPs.
<G>
mark