Re: [Sshguard-users] protecting a server with password authentication disabled

[Kevin Z. <kev...@gm...>]

On 04/17/2016 14:18, li...@la... wrote:
> If you use a key, is there any advantage to blocking the port 22
> password guessers? That is, sshguard does protect other services. I'm
> thinking an IP that attacks ssh is likely to attack other services.
> The hacker/bot doesn't know passwords are not used for ssh.

If your sshd is configured to allow only key logins, password guessing
attempts will show up as "preauth" disconnects. SSHGuard treats these
messages like any other attack and blocks accordingly.

Whether other services are protected or not depends on how your firewall
rules are set up.

> Then if the answer is no, once password logins are not allowed on
> ssh, should the blocking list be wiped?

Not sure what this question is asking.

Best,
Kevin

-- 
Kevin Zheng
kev...@gm... | ke...@be... | PGP: 0xC22E1090