Re: auth log full with

[Matthias Böttcher <matthias.boettcher@gmail.com>]

Am So., 14. Aug. 2022 um 09:51 Uhr schrieb Reco <recoverym4n@enotuniq.net>:

> Personally I don't use fail2ban for sshd. Because why bother with
> userspace (written in python too, yuck) if the kernel does the same job?
> I.e. block M$ AS, China Telecom AS and maybe add Eastern Europe to the
> mix, and you've just reduced the number of offending logins by two
> orders of magnitude.

Hi Reco,

how do I block these ip ranges?
Which source can I use to determine the geo location of ip addresses?
Is there a Debian packet?

Thanks for your help.

    Matthias