Groups > linux.debian.user > #195918

Re: Securing development environment

From	Gene Heskett <gheskett@shentel.net>
Newsgroups	linux.debian.user
Subject	Re: Securing development environment
Date	2018-05-19 21:30 +0200
Message-ID	<vRfId-3eP-1@gated-at.bofh.it> (permalink)
References	<vQVq9-7Lr-1@gated-at.bofh.it> <vR6Yi-6Df-3@gated-at.bofh.it> <vRbXZ-10z-37@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Saturday 19 May 2018 11:29:25 Andy Smith wrote:

> Hello,
>
> On Sat, May 19, 2018 at 12:03:37PM +0200, Hubert Hauser wrote:
> > On 19/05/18 07:29, Chris wrote:
> > > Make those services listen to localhost and do port forwarding in
> > > your SSH client.
> >
> > It might be a good idea but I am not sure whether fail2ban with
> > nginx basic_auth mechanism is a simplier solution. You have not
> > replied me is it. Should I worry about maximum length of passwords
> > (8 characters)?
>
> If the services are only available in localhost then you don't need
> fail2ban.
>
> Fail2ban is a massive hack (spotting wrongdoing by reading logs of
> it after the fact?) so if there is a way to avoid the issue in the
> first place then to me that is preferable.
>
> Cheers,
> Andy

I've had fail2ban running on my machinery here, for close to 20 years.  
Its never triggered. Portsentry, maybe twice in that same time frame.

I also have dd-wrt between my stuff and the internet. Nothing comes thru 
that unless I clear it. That's a comforting feeling...

-- 
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page <http://geneslinuxbox.net:6309/gene>

Thread

Securing development environment Hubert Hauser <hubot@mail.com> - 2018-05-18 23:50 +0200
  Re: Securing development environment Chris <chris2014@postbox.xyz> - 2018-05-19 07:40 +0200
    Re: Securing development environment Hubert Hauser <hubot@mail.com> - 2018-05-19 12:10 +0200
      Re: Securing development environment Joe <joe@jretrading.com> - 2018-05-19 13:30 +0200
      Re: Securing development environment Andy Smith <andy@strugglers.net> - 2018-05-19 17:30 +0200
        Re: Securing development environment Gene Heskett <gheskett@shentel.net> - 2018-05-19 21:30 +0200
    Re: Securing development environment Andy Smith <andy@strugglers.net> - 2018-05-19 17:20 +0200

csiph-web