How I spend my first 5 minutes on a server

Re:How I spend my first 5 minutes on a server by rdl on Sunday March 03, 2013 @10:13PM (#5316361)

I hate it when people do that, myself. Especially when you have a lot of other tools, many of which don't take port arguments easily.

IMO best practice is to firewall off everything except some bastion hosts or VPN gateway.

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by plusbryan on Sunday March 03, 2013 @10:15PM (#5316365)

Totally agree. If you stick to good security practices, working around a non-standard port is an unnecessary annoyance imho.

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by pseudonym on Sunday March 03, 2013 @11:30PM (#5316606)

I actually do this on my personal server because more than one public wifi (and one of my previous jobs, at a public high school) disallowed outbound 22 connections.

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by afhof on Sunday March 03, 2013 @10:20PM (#5316379)

Don't do this. It adds almost no extra security and makes it hard for routers that prioritizes port 22 traffic as interactive.

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by kristofferR on Sunday March 03, 2013 @11:00PM (#5316509)

Sure, it'll not stop dedicated manual intrusion attempts, but it will actually prevent a ton of automated bots from even just trying to connect with common passwords through SSH.

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by corin_ on Sunday March 03, 2013 @11:07PM (#5316530)

Which is irrelevant if you have any one of: strong passwords, no passwords, fail2ban

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by lhnn on Sunday March 03, 2013 @11:45PM (#5316670)

Which is relevant if you're one to actually look at your login attempt logs.

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by falcolas on Sunday March 03, 2013 @11:28PM (#5316599)

Worth looking at:

http://bsdly.blogspot.com/2013/02/theres-no-protection-in-hi...

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by kristofferR on Monday March 04, 2013 @01:58AM (#5317049)

2222 is a dumb choice as an alternative port, it's both obvious and quite commonly used. I'm using a port on 4XXXX-range that's normally not used for anything and therefore not scanned by the bots unless all the 65536 ports are. The automated login attempts disappeared almost immediately, except for a few that were quickly blocked.

Now the logs are clean from automated login bots, the only thing left are real dedicated hacking attempts that is worth pursuing further.

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by jebblue on Monday March 04, 2013 @12:34AM (#5316841)

It's what I do, you can't break in a door that doesn't exist, only those you know exist.

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by hackerboos on Monday March 04, 2013 @05:05AM (#5317541)

>Sure, it'll not stop dedicated manual intrusion attempts, but it will actually prevent a ton of automated bots

Doesn't take long to port scan a server.

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by brokentone on Monday March 04, 2013 @12:06AM (#5316742)

Going back to the classics, is port knocking still a thing? (I've been out of this discussion for a while, serious question)

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by robflynn on Monday March 04, 2013 @12:42AM (#5316860)

One of my freelance projects uses port knocking, but they're the only one I've worked with that have used it in recent years.

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by webosb on Monday March 04, 2013 @12:44AM (#5316866)

guess i'm going back to port 22...

[ Parent | on HN ]

Re:How I spend my first 5 minutes on a server by vahe on Monday March 04, 2013 @12:49AM (#5316883)

I'm convinced too. Back to 22 we go.

[ Parent | on HN ]