What are the basic security actions I should take when securing an OpenSSH server on Windows Subsystem for Linux (WSL), especially when I am the only one that should login to this server, but can't use an IP whitelist (from various reasons)?
Also, my main concern is brute force attacks because my WSL environment is super minimal and generally has no utilities installed besides what's native and whether I use a password or some key pair, I still want to have this mechanism that after X amount of false logins, holds the user for Y amount of time and says:
Too much wrong connection tries, you can try again in 24 hours.
While I don't know the name for such mechanism, I could have one via installing CSF-LFD, but you can't install it in WSL for now as the WSL beta version doesn't include the relevant shell services required by CSF-LFD, as you could read in this discussion. so I need to find an alternative that will let me to have this mechanism which it is very important for me to have, again, whether I use a password or a key pair.