Groups > linux.debian.user > #195906

Re: Securing development environment

From	Andy Smith <andy@strugglers.net>
Newsgroups	linux.debian.user
Subject	Re: Securing development environment
Date	2018-05-19 17:30 +0200
Message-ID	<vRbXZ-10z-37@gated-at.bofh.it> (permalink)
References	<vQVq9-7Lr-1@gated-at.bofh.it> <vR2L0-3Yw-1@gated-at.bofh.it> <vR6Yi-6Df-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Hello,

On Sat, May 19, 2018 at 12:03:37PM +0200, Hubert Hauser wrote:
> On 19/05/18 07:29, Chris wrote:
> > Make those services listen to localhost and do port forwarding in your
> > SSH client.
> 
> It might be a good idea but I am not sure whether fail2ban with nginx
> basic_auth mechanism is a simplier solution. You have not replied me is
> it. Should I worry about maximum length of passwords (8 characters)?

If the services are only available in localhost then you don't need
fail2ban.

Fail2ban is a massive hack (spotting wrongdoing by reading logs of
it after the fact?) so if there is a way to avoid the issue in the
first place then to me that is preferable.

Cheers,
Andy

Thread

Securing development environment Hubert Hauser <hubot@mail.com> - 2018-05-18 23:50 +0200
  Re: Securing development environment Chris <chris2014@postbox.xyz> - 2018-05-19 07:40 +0200
    Re: Securing development environment Hubert Hauser <hubot@mail.com> - 2018-05-19 12:10 +0200
      Re: Securing development environment Joe <joe@jretrading.com> - 2018-05-19 13:30 +0200
      Re: Securing development environment Andy Smith <andy@strugglers.net> - 2018-05-19 17:30 +0200
        Re: Securing development environment Gene Heskett <gheskett@shentel.net> - 2018-05-19 21:30 +0200
    Re: Securing development environment Andy Smith <andy@strugglers.net> - 2018-05-19 17:20 +0200

csiph-web