Hacker News new | ask | show | jobs
by jeroenhd 1011 days ago
If you're still on iptables, you can TARPIT traffic using firewall rules that will essentially do that. nftables doesn't have tarpitting just yet, I believe.

If you want to annoy SSH brute forcing bots, endlessh is a dedicated tool for SSH connections. There are other tools for other dedicated protocols as well.

1 comments

Cool, thanks! I do use fail2ban on my VPSs fairly liberally, so filling any one log with too much noise will trigger an hours-long ban for the IP.

What I liked about the application-level interference is that you can do something more subtle than a block, while still feeding them nonsense, slowly.