I'd even go one step further and say portknocking would do a lot of good too, in...

techcode · 2024-09-04T17:15:53 1725470153

If anyone actually does this - please have a backup for the time when either Fail2Ban or/and PortKnocking (so both) fail or lock you out.

lagniappe · 2024-09-04T17:23:16 1725470596

I've never had knockd fail me, can you fill me in on what pitfall got yours to go down? Just in case.

techcode · 2024-09-04T18:47:23 1725475643

Besides dummy stuff like wrong config of knockd itself - which hopefully gets ironed out during initial (local/on-prem setup).

Every now and then particular knock ports might be blocked (DROP) by cliënt side ISP/wifi/etc you happen to be using at the moment.

Or your fiber optic connection package gets a speed boost, along with being moved behind CGNAT.

OK in my case switching from cable to fiber already included ending up behind a CGNAT, but people already on that ISP actually got that 2in1 surprise.