3 ms·
Better to only permit logins from specific IPs.
by cpncrunch 14y ago
Better to only permit logins from specific IPs.
- danielrm26 14y agoI wouldn't say better: I'd say that it's another optional layer. Sometimes you cannot do that, where you can change the SSH config for all users to use a different port.
- astrodust 14y agoBetter until you need to log in from a place that's not on that exclusive list. Then way worse.
- cpncrunch 14y agoBeen in that situation, and now I have a solution to allow me to update the list (which I don't want to discuss here). Basically I open a very small potential hole, but plug the much larger hole of wide open ssh port.