3 ms·
Requiring ssh keys, disabling password auth, and using ssh bastion hosts is my preferred approach.
by deeblering4 6y ago
Requiring ssh keys, disabling password auth, and using ssh bastion hosts is my preferred approach.
- robomc 6y agoYeah it's not clear to me why exposing the ability to configure your firewall, protected by a keypair, to the internet, is safer than just letting someone bang their head against sshd, protected by a keypair, and presumably having had a lot more eyes on it for security.
- donor20 6y agoAnd the distributions can also do the SElinux stuff that I don't use day to day.