4 ms·
And if you do want to use password authentication, simply whitelist the allowed logins. This assumes you are using a strong password.
by keeperofdakeys 12y ago
And if you do want to use password authentication, simply whitelist the allowed logins. This assumes you are using a strong password.
- threeseed 12y agoOther options: Run it on a different port, use certificates or YubiKey for authentication, firewall it to your home computer, use Fail2ban or Denyhosts.
- keeperofdakeys 12y agoRunning it on a different port is only protection against random attacks (sweeping ip addresses looking for common passwords). This seems much more like a targeted attack, someone took the time and effort to try to get in. A small port scan isn't hard, and will get around changing the port. Of course, the other things you've listed are solutions for this. I was just posting a single option to complement the other comments.
- deckiedan 12y agoI have an ssh-access group, then the ssh server config is limited to that group. It makes it very easy to keep track of, and also works pretty well for maintenance with ansible.