I'm using Google Authenticator, was a breeze to install and configure on both my VPS and my phone. Haven't checked, but I kinda wish Windows had GA auth support...
The only potential problem is that if I wipe my phone (to install a different ROM, for instance), it's not particularly easy to automatedly transfer the GA details to the new ROM, but as long as you keep a (written) copy of the GA key, you can just reinstall and use the same key.
Kind regards
Murray Crane
On 14 December 2012 09:28, Michael Stevens
<mstevens@etla.org> wrote:
On Thu, Dec 13, 2012 at 02:23:57PM +0000, Murray Crane wrote:
> Would just like to thank the list for reminding me to install fail2ban.
>
> I have my SSH set up with 2-factor auth any how (with no root login), and
> I've been lucky enough not to be hit by an attack (so far, touch wood), but
> a little bit of "belt and braces" never goes amiss.
What kind of 2 factor authentication are you using? I've played with the
gooze.eu oath dongles.
I know I only posted this recently, but it's well with setting up
fail2ban to monitor any service you're authenticating, not just ssh.
Michael