sec: recommended aggressive ids on edge #1

Closed
opened 2023-06-24 18:36:23 -04:00 by Ghost · 2 comments

ef82734585/modules/security.nix (L52)

since you're already setting ignoreip👍

 	    ignoreIP = [
	      "192.168.0.0/16"
	      "172.16.0.0/12"
	      "10.0.0.0/8"
	      "5.161.181.184"
	    ];

here are some recommended settings for global config:

findtime = 100000
bantime  = 100000
maxretry = 1
mode = aggressive

this keeps the noise from the bots+scanners on the internet and the skids with scriptz at bay.

https://git.notohh.dev/notohh/snowflake/src/commit/ef82734585759868abe0cc5ec3f7a81e6bcc4914/modules/security.nix#L52 since you're already setting `ignoreip`👍 ```` ignoreIP = [ "192.168.0.0/16" "172.16.0.0/12" "10.0.0.0/8" "5.161.181.184" ]; ```` here are some recommended settings for global config: ```` findtime = 100000 bantime = 100000 maxretry = 1 mode = aggressive ```` this keeps the noise from the bots+scanners on the internet and the skids with scriptz at bay.
Owner

awesome! will put this in the config asap

awesome! will put this in the config asap
Owner

added

added
Sign in to join this conversation.
No description provided.