5 ms·
I would change the ssh port to nonstandard, maybe implement a knocking protocol. Maybe leave a honeypot/tarpit server on the original ssh port to distract the
by golem14 4y ago
I would change the ssh port to nonstandard, maybe implement a knocking protocol.
Maybe leave a honeypot/tarpit server on the original ssh port to distract the bots.
8gb of bandwidth a month seems not worth sweating about.
- JoeOfTexas 4y agoYea, seems like non-standard port is the way to go for now. Knocking protocol seems overkill. I'm security conscious, but I am lazy too.
- golem14 4y agoI don't disagree. It helps to put the new ssh port on some other well established port you are not using (say port 52, 69 or 70 or something). Bots seem to be less likely to try out ssh when another protocol is supposed to be running there. Speaking from experience, my ssh attempts have been reduced to pretty much 0 after the switch.