4 ms·
"Use a non-standard port: I'm not a big fan of security through obscurity and it doesn't work well for ssh." When I had sshd running on the standard port on my
by Luyt 16y ago
"Use a non-standard port: I'm not a big fan of security through obscurity and it doesn't work well for ssh."
When I had sshd running on the standard port on my MacMini, it would often slow down and start spinning the fan like crazy while some cracker was bruteforcing accounts and passwords. Now that I have it on a non-standard port, that never seems to happen anymore.
- bhousel 16y agofail2ban (also mentioned in the article) would help you too..
- akl 16y agoThat's good for your mac mini, but not a normal use case for a server running sshd (needing to be quiet, that is). Something that might also work for you would be to limit inbound access from known-trusted ip ranges, as well. Running sshd on a nonstandard port isn't in itself a bad idea (other than the potential difficulty of logging into the server later if you forget the port or something), but it shouldn't be considered a strong security measure at all.