2 ms·
>if you have real security you wouldn't bother using another port because there's no (security) reason to do so. Strong disagree with that. If you do something
by 0cf8612b2e1e 4y ago
>if you have real security you wouldn't bother using another port because there's no (security) reason to do so.
Strong disagree with that. If you do something as simple as moving SSH to a different port, the number of drive-by attacks will drop enormously. Raises the signal to noise of all connection attempts in the logs.
- autoexec 4y agoSSH is what came to mind right away. The bots never sleep and will happily hammer at your server and fill your logs all day. I'd never depend on a new port as the only protection though. One man's security through obscurity is another man's defense in depth.
- Turskarama 4y agoI guess that's true, but that's not a security reason.
- JohnFen 4y agoSure it is. Running on a nonstandard port is absolutely as adequate of a security measure as locking a screen door. But it does filter out a fair number of probes, and reducing the number of probes does increase your security. So it's like locking the screen door in front of your reinforced, deadbolted door. Some people will try the screen door, find it locked, and move on. It doesn't do a lot, but it's not entirely worthless, either.