News for hackers. Stuff that matters.

A comment on I looked through attacks in my access logs. Parent comment

Re:I looked through attacks in my access logs by indigodaddy on Sunday January 28, 2024 @04:32PM (#39170011)
One option could be to lock the port down to only your jump/bastion server source IP.
[ Parent | on HN ]
Re:I looked through attacks in my access logs by bradknowles on Sunday January 28, 2024 @04:35PM (#39170036)
That fails to when you lose that IP address, or you lose that server.
[ Parent | on HN ]
Re:I looked through attacks in my access logs by indigodaddy on Sunday January 28, 2024 @04:39PM (#39170070)
I suppose if you don’t have console access, sure. But inconvenient at worst imv.
[ Parent | on HN ]
Re:I looked through attacks in my access logs by bradknowles on Sunday January 28, 2024 @04:42PM (#39170090)
If you have a way around that bastion server, then at least you've got a backup. But then you also have to worry about the security of that backup.
[ Parent | on HN ]
Re:I looked through attacks in my access logs by PLG88 on Monday January 29, 2024 @04:12AM (#39174315)
Yes, better to make your bastion 'dark' without being tied to an IP address. This is how we do it at my company with the open source tech we have developed - https://netfoundry.io/bastion-dark-mode/
[ Parent | on HN ]