Re: [SSHGuard-users] Blocked attackers can still access docker containers

[Christopher E. <ce...@lc...>]

On 01.11.19 14:59, gi1...@gm... wrote:
> This makes sense, thanks a lot. sshguard blocks about 15 attacks an hour
> on my machine, and I haven't seen any noticeable CPU increase since I
> switched to hooking pre-routing.

Unless there's enough traffic that the firewall itself is causing
significant load, I doubt one would ever notice the difference.

Re using prerouting by default: Hooking into prerouting might also not
be quite as easy with backends that don't act directly on the firewall,
like e.g. the firewalld backend. But that's a question the devs can
answer much better than me.

Anyway, I'm glad things work for you now.

Christopher