Re: How to make Guacamole safe.

2024-02-19 Thread Ivanmarcus
Andrea, Mike means that you will need to be looking at, and blocking if necessary, unique public IP addresses. Most likely private addresses (eg. 192.168.x.x) would normally be 'trusted', or in some cases not unique, so there's no point in having having fail2ban analyse them. Also, fail2ba

Re: How to make Guacamole safe.

2024-02-19 Thread Andrea Miconi
My firewall already has an Intrusion Detection function.Guacamole is behind the firewall and behind the reverse proxy.When you talk about "is running on the public-facing server" are you still talking about Guacamole? Is Failban already configured for Guacamole or do I have to configure it mysel

Re: How to make Guacamole safe.

2024-02-18 Thread Michael Jumper
On 2/18/24 23:15, Andrea Miconi wrote: My Guacamole is installed on a PC with Debian 12 and I use it to connect to my PCs and servers. Besides G. there is nothing else installed; maybe later I will want to install Zabbix. G. is now behind a firewall with HA-Proxy as reserver proxy. I wonder if

How to make Guacamole safe.

2024-02-18 Thread Andrea Miconi
My Guacamole is installed on a PC with Debian 12 and I use it to connect to my PCs and servers. Besides G. there is nothing else installed; maybe later I will want to install Zabbix. G. is now behind a firewall with HA-Proxy as reserver proxy.I wonder if I shouldn't secure the server anyway, for