search

nextcloud / documentation

📘 Nextcloud documentation
https://docs.nextcloud.com
Other
481 stars 1.65k forks source link

bruteforcesettings vs fail2ban #11425

Open paolosg opened 2 years ago

paolosg commented 2 years ago

I'm wondering what's the difference between bruteforcesettings and fail2ban (which integration in Nextcloud is detailed here). Does it make sense to use/install both?

FernandoMarques-Santos commented 2 years ago

I just found this old question with no answers, and I will answer in case someone stumbles upon this.

The bruteforcesettings bans IPs on the nextcloud authentication level, while fail2ban bans IPs on the whole system. You should definitely use fail2ban, as it offers some (not full) protection by default for other use cases, such as SSH. It doesn't hurt to have bruteforcesettings running as well. Of course, bruteforcesettings would be redundant, but it is better to play safe and if something is misconfigured or bugs out someday, at least you have one more layer of security.