On 2016-08-29, TE Dukes <tdukes at palmettoshopper.com> wrote: >> >> Can you be more specific about the "load" you're trying to mitigate? Is it >> really the load on your home system, or is it that attackers are using your >> bandwidth, or a combination? > > [Thomas E Dukes] > I saw that as well but it was a little vague on how to do that. There are two easy (though not quantitative) tests you can do. First, look at the load on the server. If httpd is using a lot of CPU and putting your load over 1, your main issue is probably the load being generated by .htaccess reads. If you have another system on your home network, try a speed test. If it performs crappy you probably have a problem with attackers eating your bandwidth. You and another poster mentioned fail2ban; if you can get that configured to watch and protect both sshd and httpd that will help both problems quite a bit. --keith -- kkeller at wombat.san-francisco.ca.us