Gentoo Archives: gentoo-user

From: Stroller <stroller@××××××××××××××××××.uk>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] Fail2Ban vs SSHGuard? Comparison? What's the difference?
Date: Sat, 16 Sep 2017 21:25:26
Message-Id: 5F78B11A-6AB6-4389-A025-E69D05524934@stellar.eclipse.co.uk
In Reply to: Re: [gentoo-user] Fail2Ban vs SSHGuard? Comparison? What's the difference? by Alan McKinnon
1 > On 16 Sep 2017, at 20:31, Alan McKinnon <alan.mckinnon@×××××.com> wrote:
2 >
3 > As far as I'm aware (and could be wrong), sshguard is mostly just sshd
4 > whereas fail2ban works on anything you can give it consistent logs for.
5
6 I thought otherwise, but you appear to be right - SSHGuard appears to have only a handful of "signatures", so it looks like Fail2Ban it is.
7
8 https://www.sshguard.net/docs/reference/attack-signatures/
9
10 Stroller.

Replies

Subject Author
Re: [gentoo-user] Fail2Ban vs SSHGuard? Comparison? What's the difference? Alan McKinnon <alan.mckinnon@×××××.com>