3 ms·
If there's ever a TCP-based attack against the server, the non-standard port reduces the risk a little bit.
by Florin_Andrei 15y ago
If there's ever a TCP-based attack against the server, the non-standard port reduces the risk a little bit.
- sespindola 15y agoThe risk reduction is negligible if someone is doing a portscan on your host. Connection attempts to non standard ports will eventually occur. The better solution is to use single packet authorization.[1] 1. http://cipherdyne.org/fwknop/ http://cipherdyne.org/fwknop/
- Florin_Andrei 15y agoYeah. It depends on how persistent they are. Using DROP on all closed ports may discourage some attackers. Others may remain undeterred.