Simplify your life with an SSH config file

Re:Simplify your life with an SSH config file by SkyMarshal on Saturday October 20, 2012 @01:54PM (#4677698)

This looks great, would love to use this instead of ssh for my AWS servers, but not so sure about opening firewall ports 60000-61000. Currently only 80, 443, and 22 are open, that's a big addition.

Is that SOP for mosh, or do you guys proxy through a mosh-only server to your actual servers, or something else?

[ Parent | on HN ]

Re:Simplify your life with an SSH config file by cmer on Saturday October 20, 2012 @06:11PM (#4678326)

You only need to open 1 udp port afaik. That's what I do anyways.

Opening a high port in the 60000s is less risky than 22. You should probably remap ssh to something else. Or you can use ec2 security groups to limit access to certain ips.

[ Parent | on HN ]

Re:Simplify your life with an SSH config file by oijaf888 on Monday October 22, 2012 @12:05AM (#4681805)

Except anyone on the machine can bind to a port above 1024 so if your mosh server process ever exits for any reason a compromised account could bind a backdoored version.

[ Parent | on HN ]