Revert to default FAIL2BAN findtime for SSH jail

I propose that the default 600s/10minute find time is a better test duration for this ban. The altered 120s findtime sounds reasonable until you consider that attackers can simply throttle to 3 attempts per minute and never be banned. The remaining non default jail settings of maxretry = 7 and bantime = 3600 I believe are good.

Revert to default FAIL2BAN findtime for SSH jail
I propose that the default 600s/10minute find time is a better test duration for this ban. The altered 120s findtime sounds reasonable until you consider that attackers can simply throttle to 3 attempts per minute and never be banned. The remaining non default jail settings of maxretry = 7 and bantime = 3600 I believe are good.
ae3ae0b5 · anoma · 42d657eb · ae3ae0b5
Commit ae3ae0b5 authored Sep 07, 2015 by anoma
Show whitespace changes
Inline Side-by-side

Showing with 0 additions and 1 deletion

jail.local conf/fail2ban/jail.local +0 -1

No files found.
--- a/conf/fail2ban/jail.local
+++ b/conf/fail2ban/jail.local
@@ -4,7 +4,6 @@
 [ssh]
 maxretry = 7
-findtime = 120
 bantime = 3600
 [ssh-ddos]