2 ms·
Simply changing the default SSH port cuts it down even more, and I'm not convinced that fail2ban actually adds much security. It may even increase your surface
by LeoPanthera 3y ago
Simply changing the default SSH port cuts it down even more, and I'm not convinced that fail2ban actually adds much security. It may even increase your surface of exposure, if it happens to have a security bug in it.
- electricant 3y agoI mapped the SSH port to 122 on the external network while it stays 22 on the LAN. Then, I limit the number of connectons to port 122 at the firewall, using iptables (https://www.cyberciti.biz/tips/howto-limit-linux-syn-attacks.html https://www.cyberciti.biz/tips/howto-limit-linux-syn-attacks...). Now the failed logins on ssh is down to 1-2 per day instead of hundreds.