4 ms·
Should "change ssh port" even really be on the list?
by ubercore 14y ago
Should "change ssh port" even really be on the list?
- espennilsen 14y agoI moved the front door of my house to the back, haven't had any burglars brake in. Can't argue with that!
- stock_toaster 14y agoThe the only reason I change my ssh port is to reduce log file noise. Not as a security mechanism. Oddly enough, I have also run across networks where outbound port 22 was blocked. Handy for that too.
- 16s 14y agoMe too. I've used a different ssh port for eight years. Not a single log entry from ssh brute forcing idiots during this time.
- flexd 14y agoI really think it should not. I run ssh on the standard port, and as long as you use something like denyhosts and public key authentication, and you disable password and root login, you should be good. You could even limit the IP ranges allowed to connect to ssh, but that kind of limits your ability to connect from different places. The little malicious traffic you experience by having ssh on port 22 is dealt with by denyhosts, the attacker would not be able to get in and they would never be able to try again from the same host.
- pekk 14y agoWhat's wrong with changing the ssh port?
- muriithi 14y agoSecurity by obscurity. It is trivial to use a port scanner to discover open ports(including your "new" ssh port).