I have received a lot of feedback regarding this. I'm waiting for Ubuntu to update their CIS docs for 24.04, I'll update my post when they do. I keep a lot of my blog posts regularly updated, this post will be one of them.

KenHV

·2 tahun yang lalu·discuss

Fail2Ban doesn't do much for SSH other than keeping your logs cleaner if you're using key based auth. It's quite good for protecting other services like Vaultwarden for example. Of course, it's just one additional layer. The important part is to configure the services themselves to be more secure.

KenHV

·2 tahun yang lalu·discuss

It might be a firewall issue or one of the Fail2Ban jails. If you're using all the Nginx jails, try disabling them and see if it fixes the issue.

KenHV

·2 tahun yang lalu·discuss

I'm surprised my post made it to HN :D

KenHV

·2 tahun yang lalu·discuss

profile=high-quality

KenHV

·2 tahun yang lalu·discuss

Thank you! I'm using Jekyll, here's the source: https://github.com/kenhv/kenhv.com

KenHV

·2 tahun yang lalu·discuss

My blog is mostly just me sharing things to my friends; some of them IRL. Short tutorials, highlights from books, etc.

https://kenhv.com/blog