Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 2 Oct 2009 21:42:07 +0200
From:      Patrick Proniewski <patpro@patpro.net>
To:        Liste FreeBSD-security <freebsd-security@freebsd.org>
Subject:   Re: openssh concerns
Message-ID:  <A6C54834-2243-426F-8A00-B4D547FA3226@patpro.net>
In-Reply-To: <20091003042802.O10039@sola.nimnet.asn.au>
References:  <4AC545C3.9020608@johnea.net> <19141.20047.694147.865710@hergotha.csail.mit.edu> <4AC61C0B.3050704@johnea.net> <20091003042802.O10039@sola.nimnet.asn.au>

next in thread | previous in thread | raw e-mail | index | archive | help

--Apple-Mail-1--820062776
Content-Type: text/plain;
	charset=US-ASCII;
	format=flowed;
	delsp=yes
Content-Transfer-Encoding: 7bit

> This will provide the greatest relief against drive-by ssh probes,  
> which
> are pretty much background radiation these days.  Some may decry it as
> 'security by obscurity', but who cares when it works so effectively :)

against script kiddies and bots, obscurity is good.


> http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers  
> provides a
> reasonably useful list of ports NOT to choose for an obscure ssh port.

/etc/services is a good start too :)

patpro
--Apple-Mail-1--820062776--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?A6C54834-2243-426F-8A00-B4D547FA3226>