7e7ccc7b
Gregory Mullen
So you've chosen volence!
7e7ccc7b
Gregory Mullen
7e7ccc7b
Gregory Mullen
fail2ban supports many more uses, but requires too much attention to configure
7e7ccc7b
Gregory Mullen
correctly; benevolence is opinionated, so you don't have to be.
7e7ccc7b
Gregory Mullen
7e7ccc7b
Gregory Mullen
Opinions
7e7ccc7b
Gregory Mullen
* nft > iptables
7e7ccc7b
Gregory Mullen
* logs should be low noise; banning noisy hosts helps
7e7ccc7b
Gregory Mullen
* lying is proof of malign intent
7e7ccc7b
Gregory Mullen
* binary logs are dumb
7e7ccc7b
Gregory Mullen
* firewall configuration isn't benevolence's job
7e7ccc7b
Gregory Mullen
7e7ccc7b
Gregory Mullen