Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 Nov 2005 19:52:21 +1100
From:      Peter Jeremy <PeterJeremy@optushome.com.au>
To:        Marian Hettwer <MH@kernel32.de>
Cc:        freebsd-security@freebsd.org, ray@redshift.com
Subject:   Re: Need urgent help regarding security
Message-ID:  <20051121085221.GA4267@cirb503493.alcatel.com.au>
In-Reply-To: <43818643.5000206@kernel32.de>
References:  <3.0.1.32.20051117232057.00a96750@pop.redshift.com> <43818643.5000206@kernel32.de>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 2005-Nov-21 09:33:07 +0100, Marian Hettwer wrote:
>ray@redshift.com wrote:
>>Also, if you have access to the router, it's handy to re-write
>>traffic from a higher public port down to port 22 on the server,
>>since that will trip up anyone doing scans looking for a connect on
>>port 22 across a large number of IP's.
>>
>No. That's security by obscurity and doesn't make your system even a wee 
>bit more secure.

It depends what you are guarding against.  If someone wants to get into
_your_ system then it's worthless.  OTOH, "you don't have to run faster
than the bear, just faster than someone else": Moving your ssh access
off port 22 means that someone doing a network scan of port 22 won't
see your system.  This is reasonable protection against script kiddies.

Definitely, don't rely on it as your only security.  But, IMHO, it is
worth doing in addition to other security measures.
-- 
Peter Jeremy



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051121085221.GA4267>