6 ms·
This is generally well regarded security advice. Its what #ubuntu-server tends to recommend to people if they come in saying their SSH port is being attacked. S
by ElliotH 16y ago
This is generally well regarded security advice. Its what #ubuntu-server tends to recommend to people if they come in saying their SSH port is being attacked. Simply changing the port greatly reduces the number of attacks, and combined with IP blocking (automatic with fail2ban or similar) you are completely protected from these simplistic automated attacks.
- measure2xcut1x 16y agoMaybe I'm stating the obvious, but in my experience an obscure port number will limit the number of requests, AND you should have a hard firewall in front of it with IP blocking | filtering.
- antihero 16y agoWhat advantage does having a hard firewall give you over using iptables?
- measure2xcut1x 16y agoLess load on the server, plus probably fewer vulnerabilies and simpler admin on the firewall device. I suppose your mileage will vary.
- yock 16y agoThe folks in #ubuntu-server say that because it quickly placates the people who erroneously believe they're under attack when in fact practically every public ssh daemon in the world gets probed for weaknesses. I've always believed that this was a useless measure of security. The things it defends against are are made ineffective by other security measures you should be taking anyway. In the end, the only benefit it produces is reducing logspam.