Ask HN：Fail2ban 的替代方案？
3 分•作者: jech•大约 1 个月前
我正在管理少量运行着暴露于互联网的 SSH 服务器的 Linux 服务器。我通常使用加密密钥连接，但为了以防万一（也许是我过于谨慎），我仍然允许密码身份验证。我一直在使用 fail2ban 并取得了不错的效果，但我很烦恼需要在每台服务器上都安装 Python 解释器。
有没有一个单一二进制文件的 fail2ban 替代方案？它不需要具备 fail2ban 的所有功能，我只需要阻止针对 SSH 的字典攻击。
查看原文
I'm administering a small number of Linux servers that run an ssh server exposed to the Internet. I usually connect using a cryptographic key, but I still allow password authentication in case of trouble (perhaps I'm being overly cautious). I've been using fail2ban with good results, but I'm annoyed at having to install a Python interpreter on every server.<p>Is there an alternative to fail2ban that is just a single binary? It doesn't need to have all of the features of fail2ban, blocking dictionary attacks against ssh is all I need.