3 ms·
How is port knocking not, I dunno, at least 10x more inconvenient for users? FWIW, I've never seen a brute force attack on SSH other than on port 22. Most like
by MichaelGG 10y ago
How is port knocking not, I dunno, at least 10x more inconvenient for users?
FWIW, I've never seen a brute force attack on SSH other than on port 22. Most likely, a targeted attacker would realise if you change the port, you're probably not going to have a trivial password.
- more_corn 10y agoI agree, I set up port knocking and it's a huge pain in the butt (so much so that I never moved it out of testing). It also lacks cryptographic verification. It's a lot of trouble for a not quite ideal solution.
- aaronmdjones 10y agoThe Single Packet Authorization variant of port knocking has built-in authentication.
- laumars 10y agoPort knocking is more inconvenient but its also more secure. I'm not advocating it though, just example how low down the scale I consider non-standard ports as a sensible recommendation. Random IPs are unlikely to be port scanned but any reasonably popular site will.