3 ms·

If your server is on the internet with a public ssh server then it is probably providing some sort of internet service. That internet service is almost always e

If your server is on the internet with a public ssh server then it is probably providing some sort of internet service. That internet service is almost always easier to DoS than your openSSH server. If you are not providing a internet service then why is your SSH open to the internet?

kloop 2y ago
> If you are not providing a internet service then why is your SSH open to the internet? So that I can ssh into it from various places and do stuff on my home server from elsewhere
- SahAssar 2y ago
  So you are accessing that server's services from some network, why are you not only allowing SSH over that network? Or, if your service is open to the internet then why does not what I said above hold true?
  - kloop 2y ago
    I guess I am technically, but only for myself
    - SahAssar 2y ago
      What is the networking difference between a service for yourself that you want to access from "various places" and a public service with auth checks for your key?
jszymborski 2y ago
Maybe the service is provided over SSH via e.g. port-forwarding (or is simply "SSH access to a server").
- SahAssar 2y ago
  Sure, but are L7 attacks easier than L4 against those servers? Adding more layers/software has a cost in configuration, maintenance, attack-surface, etc.