3 ms·
Instead of exposing them directly to the Internet, have them bind only to localhost. Then run an SSH server so that people can tunnel through it to the ports, a
by josephcsible 3y ago
Instead of exposing them directly to the Internet, have them bind only to localhost. Then run an SSH server so that people can tunnel through it to the ports, and prevent brute force logins by configuring the SSH server to only use public-key authentication.
- jqpabc123 3y agoI don't think this is practical for the customer base I have. I was hoping to avoid it but 2FA looks like the most reasonable solution.