Response to https://www.reddit.com/r/HomeServer/comments/1nvv9hv/guys_is_this_bad_1000s_of_ssh_authentication/
This approach uses core linux tools that ship with any distribution, so you can avoid installing and configuring third party tools like fail2ban. If you haven't heard of netfilter, it the usertool for configuring network
| pihole deny youtube.com | |
| # here we are |
| Homebrew build logs for postgresql@14 on macOS 15.0 | |
| Build date: 2024-10-07 22:23:56 |
| allowed_extra_ports: [ 3000, 8083, 8086 ] | |
| disallowed_extra_ports: [ 5432, 2003, 8090, 8080, 8181 ] |
| TASK: [hardened | ensure host-specific ports are opened] ********************** | |
| skipping: [minerva.random.com] | |
| skipping: [achilles.random.com] | |
| ok: [juno.random.com] => (item=8080) | |
| ok: [ajax.random.com] => (item=3000) | |
| ok: [ajax.random.com] => (item=8083) | |
| ok: [ajax.random.com] => (item=8086) | |
| TASK: [hardened | reload changes to firewalld if any] ************************* | |
| skipping: [achilles.random.com] |
| - name: ensure host-specific ports are opened | |
| firewalld: port="{{ item }}/tcp" permanent=true state=enabled | |
| with_items: "{{ hostvars[inventory_hostname]['allowed_extra_ports'] | default([]) }}" | |
| register: allowed_extra_ports | |
| - name: reload changes to firewalld if any | |
| service: name=firewalld state=restarted | |
| when: allowed_extra_ports.changed |
| require 'release_calendar_rest_client' | |
| class HomeController < ApplicationController | |
| def index | |
| @activities = Activity.order('created_at DESC').limit(20) | |
| end | |
| def release_calendar | |
| @releases = ReleaseCalendarRestClient.get_releases |