Re: [nlug] fail2ban alternative for CentOS 7

2023-05-03 Thread John R. Dennison
On Wed, May 03, 2023 at 07:22:28PM -0500, Michael L wrote: > google search yielded: > "By default, fail2ban works with iptables. However, > *this has been deprecated in favor of the firewalld" . * fail2ban is available in EPEL for EL7: yum --enablerepo=extras install epel-release yum

[nlug] fail2ban alternative for CentOS 7

2023-05-03 Thread Michael L
Hello again, The last I checked, we had 170,000+ failed login attempts; 1 every 10 seconds on our CentOS 7 web server on Digital Ocean. I tried installing fail2ban, but the install failed; google search yielded: "By default, fail2ban works with iptables. However, *this has been deprecated in

Re: [nlug] Re: Time it takes to Brute Force passwords in 2023

2023-05-03 Thread Michael L
I'm humbled by all the expertise on this email thread. I have a CentOS 7 website server needing fail2ban, but it's failing on install, so I'll post another question in a separate thread. On Wed, May 3, 2023 at 2:50 PM Paul Boniol wrote: > What Csaba is saying is that, in some cases, the hashed

Re: [nlug] Re: Time it takes to Brute Force passwords in 2023

2023-05-03 Thread Paul Boniol
What Csaba is saying is that, in some cases, the hashed password has been exposed and copied to a local computer, and the encryption method is known. This eliminates any delay that may be imposed on trying to crack it, as you aren't contacting the website until you know what the password is (was).