The only motivation I know of, was a server with a password, and since they can't enter, ddos
Server Name was something like "Map testing server" where I was just mapping and you don't want to be as a regular player
09:58
DDNet doesn't do geoip filtering or does it? A player with a possible ping > 600 connecting from china shouldn't have much business on DDNet brazil
Because you are hosting gameservers and not chat-servers. But I fully understand your point. Technically they can still connect to a server in the middle, EU or US (idk). I am just tired of banning IPs from the same 3 countries, why should I let connections from countries through, which keeps attacking me and have no business on the server in the first place? I am not nice, i am angry about the world
If the banning would happen on a network level, it would certainly help against dos attacks. In my case I am banning people who try to ssh into it, which nobody except me should have business with
it protects you from bruteforce attempts, and password authentication isn't disabled, that's the point. Otherwise I'd need to have my private key on multiple machines
I am happy with my setup now, ofc my password is secure, I don't care (too much) about the logs, I like (and need) the ability to login into my server from anywhere, because I travel a lot. I already logged into it from my parents home, switzerland, finnland, all on different machines. I already thought about changing the port tho. I use the same tool an other services as well, the ssh banning is just the main cause of banned IP adresses
You are right, the benefit is small, and it would be bad if it would be the only security measurement (which it isn't). But it keeps the simple stupid bots out, which is a plus side for me
heinrich5991
if you want to have clean logs, change the SSH port
