Re:SSH Brute Force – The 10 Year Old Attack That Still Persists
by stock_toaster on Monday July 15, 2013 @03:15PM
(#6047912)
A few people use spiped[1] in similar fashion.
[1]: http://www.daemonology.net/blog/2012-08-30-protecting-sshd-u...
- Exposes less code to attack
- Can be run on a single machine, distinct from your production systems, where compromise will only result in a compromise of VPN communications, not of an actual production machine on which your production data/processes exist.