this post was submitted on 18 Mar 2026
2 points (60.0% liked)

netsec - Network Security

449 readers
10 users here now

This is the netsec Community, a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise - to provide value to security practitioners, students, researchers, and hackers everywhere.

Content Guidelines:

Discussion Guidelines:

Prohibited Content:

founded 2 years ago
MODERATORS
 

Steps I run on every new server. Nothing groundbreaking, just the basics that eliminate 99% of brute force noise:

  1. Generate ed25519 key, copy to server
  2. Disable PasswordAuthentication in sshd_config
  3. Move to a non-standard port
  4. Install fail2ban (3 attempts, 1h ban)
  5. AllowUsers + MaxAuthTries 3

Full commands and config snippets in the writeup. Takes about 5 minutes start to finish.

no comments (yet)
sorted by: hot top controversial new old
there doesn't seem to be anything here