4 ms·
I like to think of this in military terms. "Don't be where the enemy expects to find you." As TFA and several others have pointed out: (1) Don't use this as
by UI_at_80x24 6y ago
I like to think of this in military terms.
"Don't be where the enemy expects to find you."
As TFA and several others have pointed out:
(1) Don't use this as your only method of defense. The further from your LOCK the better the key needs to be.
(2) Use your security in the layers that offer the most benefit.
(3) Be proactive in your defense.
-Changing your SSH port will stop that largest number of attempts on your service.
-A non-default port PLUS port-knocking PLUS key-only PLUS whitelisted IPs PLUS whitelisted login names. Is better then only one of those.
-Apply very liberal firewall rules to prevent any unauthorized from IP's that should have access to your service. Country-code level blocklists are a thing.
Being obscure is about NOT being where your opponent expects to find you.