Using fail2ban (which should be installed by default) with longer findtime and bantime than the default (say, one hour), it is OK to only rely on passwords.

Reply via email to