Necessary to install fail2ban?

[jack100]

Hi,

Last week I installed PiVPN on my raspberry pi with Domoticz. With OpenVPN on my iPhone I connect to my raspberry pi. It's works great!
Is it necessary also install fail2ban on my raspberry pi with Domoticz?

Grtz,
Jack

[jvdz]

I assume you do not have any other ports, other than needed for PIVPN, natted to the PI?
So it depends whether you want to ban IP addresses which are trying to connect to VPN and are unsuccessful.

Jos

[jack100]

Thanks!
I don't have other ports open. Only for PiVPN.

Jack

[Egregius]

Even for that I would recommend fail2ban.
I block the whole world in pfsense. About every 2 seconds there's an attempt blocked.
Belgian ip ranges are allowed and even with only that open fail2ban has work to do.

[jack100]

Hi Egregius,

Have you an link or manual too install pfsense on my rapsberry pi with domoticz?
Gr,
Jack

[Egregius]

You can't install pfsense on a Pi. You need a dedicated device or a hypervisor for it.