2 ms·
I connect to many SSH servers that aren't under my control. It's pretty annoying to remember an arbitrary SSH port for my own. Binding to IPv6-only is more eff
by revasm 13y ago
I connect to many SSH servers that aren't under my control. It's pretty annoying to remember an arbitrary SSH port for my own.
Binding to IPv6-only is more effective at reducing log spam: IP scanning 2^128 addresses is impractical, and scanners often cannot connect because of misconfiguration/incompatibility or lack of a routable IPv6 host address.
- scintill76 13y ago> scanners often cannot connect because of misconfiguration/incompatibility or lack of a routable IPv6 host address Isn't this likely to keep you out of your own system too, at some point (accessing from unusual location without IPv6)?
- revasm 13y agoYeah. It could be problematic. Then again, 6to4/6in4 tunneling is fairly straightforward: https://en.wikipedia.org/wiki/List_of_IPv6_tunnelbrokers https://en.wikipedia.org/wiki/List_of_IPv6_tunnelbrokers. Binding to a backup IPv4 port is another option.