Re:Moving your SSH port isn’t security by obscurity
by speleding on Tuesday September 22, 2020 @07:14AM
(#24553153)
Good question. There is a lot of stuff you can safely move to IPv6 (monitoring, SNMP) and it will completely clean your logs of script kiddies trying get in that way. (Although it does not preclude you from actually securing those things, of course.)
SSH is bit tricky though, because you may find yourself on a laptop in a hotel and then you would first need to create an IPv6 tunnel to be able to get in. If the only time you need to get in is during an emergency that's a hassle you don't need.
Re:Moving your SSH port isn’t security by obscurity
by reincarnate0x14 on Wednesday September 23, 2020 @11:56PM
(#24575096)
If you're going to the trouble of having a tunnel solution then you don't need public SSH or whatever else to begin with :)
It's a pity IPSEC is still such a total dumpster fire on Windows as it works great for ad-hoc with everything else, but thankfully Wireguard has been about as light-touch as VPNs get and I've had good luck getting it out of nearly any network.
Because the public facing SSH services I have on IPv6 have never been probed or had bad login attempts even once in the last four years. I don't consider that a security control at all.