sec: recommended aggressive ids on edge #1

New issue

Closed

opened 2023-06-24 18:36:23 -04:00 by Ghost · 2 comments

Ghost commented

2023-06-24 18:36:23 -04:00

ef82734585/modules/security.nix (L52)

since you're already setting ignoreip👍

 	    ignoreIP = [
	      "192.168.0.0/16"
	      "172.16.0.0/12"
	      "10.0.0.0/8"
	      "5.161.181.184"
	    ];

here are some recommended settings for global config:

findtime = 100000
bantime  = 100000
maxretry = 1
mode = aggressive

this keeps the noise from the bots+scanners on the internet and the skids with scriptz at bay.

https://git.notohh.dev/notohh/snowflake/src/commit/ef82734585759868abe0cc5ec3f7a81e6bcc4914/modules/security.nix#L52 since you're already setting `ignoreip`👍 ```` ignoreIP = [ "192.168.0.0/16" "172.16.0.0/12" "10.0.0.0/8" "5.161.181.184" ]; ```` here are some recommended settings for global config: ```` findtime = 100000 bantime = 100000 maxretry = 1 mode = aggressive ```` this keeps the noise from the bots+scanners on the internet and the skids with scriptz at bay.