Hey #Mastodon users running online servers,
I have a question:
Is auto-ban IP for 24h systematically if they call well known ports without any service provided (FTP / SMB / ...) a good way to limit port scanners efficiency?
Hey #Mastodon users running online servers,
I have a question:
Is auto-ban IP for 24h systematically if they call well known ports without any service provided (FTP / SMB / ...) a good way to limit port scanners efficiency?
@jenesuispersonne The question is: Why do you care about port scanners?
It's easy to get distracted by what *others* are doing. Instead, block all traffic by default. Allow only what's needed. Have good backups, and test them. Use MFA. Keep services updated.