Home / server / Questions / 730886
In Process
Jacob Evans
Asked: 2015-10-23 06:37:14 +0800 CST

What are the differences between Fail2Ban and BFD (Brute Force Detection)

  • 772

I have used both Fail2Ban and BFD, typically I go with Fail2Ban on servers running IPTables, and BFD when servers are running APF.

Are there any major differences between these 2 services? What are the strengths and Weaknesses between these 2 programs and compatibility issues?.

iptables

1 Answers

  1. I didn't use much BFD. There are a couple of reasons, mostly because I find it limited compared to Fail2Ban. For instance: the BFD's purpose is to find failed login attempts, while Fail2Ban is to find pretty much anything in a log file, allowing you to create your own rules. Another reason is that BFD doesn't run as daemon. Instead, you have to schedule it through cron.

    I use Fail2Ban to block brute-force attempts in websites made with WordPress, SSH, and FTP. Great tool, by the way.

    Cya!

    • 1