问HN:Fail2ban的替代方案有哪些?

3 分•作者: jech•大约 1 个月前•原帖
我正在管理少量运行 SSH 服务器并暴露于互联网的 Linux 服务器。我通常使用加密密钥进行连接,但为了防止出现问题,我仍然允许密码认证(也许我有些过于谨慎)。我一直在使用 fail2ban,效果不错,但我对每台服务器都需要安装 Python 解释器感到烦恼。 有没有一种替代 fail2ban 的解决方案,只需要一个单一的二进制文件?它不需要具备 fail2ban 的所有功能,阻止针对 SSH 的字典攻击是我所需要的全部。
查看原文
I&#x27;m administering a small number of Linux servers that run an ssh server exposed to the Internet. I usually connect using a cryptographic key, but I still allow password authentication in case of trouble (perhaps I&#x27;m being overly cautious). I&#x27;ve been using fail2ban with good results, but I&#x27;m annoyed at having to install a Python interpreter on every server.<p>Is there an alternative to fail2ban that is just a single binary? It doesn&#x27;t need to have all of the features of fail2ban, blocking dictionary attacks against ssh is all I need.