5 ms·

My only thought is even with password auth. turned off hostile persons can still connect to the ssh daemon and might discover and unknown vulnerability or some

My only thought is even with password auth. turned off hostile persons can still connect to the ssh daemon and might discover and unknown vulnerability or some type of dos. If you know someone is trouble why let them in even if you are wearing armor?

numbsafari 14y ago
It'd really suck if they could forge traffic from you that looked like a failed login attempt and that resulted in you getting banned.
- anderiv 14y ago
  That is why fail2ban allows you to configure a whitelisted IP (your office, VPN, etc.) that will never get banned.