Re: Question on rate limiting on nftables

[Gordon Fisher <gordfisherman@gmail.com>]

On 6/8/26 5:45 AM, Kerin Millar wrote:
> [...]
>
> If the problem can be characterised as "I endure too much log noise from sshd and I find it annoying" then perhaps configure sshd(8) to additionally bind to some other random port than 22 and expose only that port.
>
> [...]

Another way is to simply disallow (drop) all connections to resources 
you don't want the random public to access, and only allow the 
hosts/networks you actually desire to get in. This has long been my 
policy on any server that I administer and thus never had a problem with 
random probes.

-- 
gfish