4 ms·
SSH is less secure on an unprivileged port, this is a bad move. Use ssh keys and fail2ban, and filter your logs if you care about the attempts that much. This i
by parliament32 7y ago
SSH is less secure on an unprivileged port, this is a bad move. Use ssh keys and fail2ban, and filter your logs if you care about the attempts that much. This is like complaining that you're seeing web scrapers in your http access log: it's just background noise, it doesn't matter.
- icedchai 7y agoI did not suggest changing it to an unprivileged port, just a non default. Also you can change the Linux privileged port range with sysctl.
- parliament32 7y ago>you can change the Linux privileged port range with sysctl I'm pretty sure you can't without recompiling the kernel, it's defined in the source in include/net/sock.h here: https://github.com/torvalds/linux/blob/master/include/net/sock.h#L1351 https://github.com/torvalds/linux/blob/master/include/net/so...
- icedchai 7y agoNewer kernels have the sysctl: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4548b683b78137f8eadeb312b94e20bb0d4a7141 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
- parliament32 7y agoOh very cool, thanks for the link! Learn something new every day