Re: [SSHGuard-users] Asterisk support

[David M. <dm...@gm...>]

Hi Kevin,

On Thu, May 14, 2020 at 1:19 PM Kevin Zheng <kev...@gm...> wrote:
>
> Just curious -- why do you have a mandate to replace fail2ban?
>

The short version is 'it does not work reliably' - there are multiple
reasons for this, some of which are unknown to me. Asterisk patterns
in fail2ban have changed drastically between versions, python version
differences impact functionality, etc. - many moving parts to
orchestrate. I appreciate the SSHGuard preference for a small, fast,
robust application without so many external dependencies.

>
> Steps 3-6 could use some fleshing-out; I'm also available to help.
>

Thank you very much!

> Let me know how you'd like to try to proceed.

I'm going to review the documentation and familiarize myself with the
code. I've also been pointed to the CSF/LFD project, which is another
possible candidate for replacing fail2ban in my environment. I
appreciate your response and I will follow up with you once I've had
time to digest my options.

David