4 ms·
I do not use or recommend security through obscurity. Such things can always be automatically discovered. https://github.com/eliemoutran/KnockIt https://githu
by lrvick 3y ago
I do not use or recommend security through obscurity.
Such things can always be automatically discovered.
https://github.com/eliemoutran/KnockIt https://github.com/eliemoutran/KnockIt
Any effort spent on setups like this is likely better spent removing the need for having ssh at all by moving to immutable appliance distros be they specialized like homeassistant or general purpose like TalosOS.
- est 3y ago> security through obscurity This is not obscurity, as someone said on HN earlier, good security is good armor, good port knocking is camouflage. They are both important.
- rafpin 3y ago> Such things can always be automatically discovered. Wouldn't fail2ban + reasonably sized (10+ ports using a mix of udp and tcp) knock sequence prevent brute force attacks like these?
- lrvick 3y agoYou can potentially go down those rabbit holes, then an attacker gets fixated on you for being so unusual and they come back doing only 2 attempts per ip per day with thousands of IPs. I have been on both sides of this game many times. Better time investment in security is just do not have ssh or a shell in production in the first place, because ssh is probably not required for your production application to function.