15 Nov
2005
15 Nov
'05
1:46 a.m.
william(at)elan.net wrote:
On Tue, 15 Nov 2005, Peter Dambier wrote:
Moving sshd from port 22 to port 137, 138 or 139. Nasty eh?
Or run two daemons. One on port 22 does not allow ANY logins at all but just tracks incoming connections and attempts (and possibly allows to block-list them in real time - typically not worth the effort though) and another one on some higher port of your choice that is a real sshd daemon for login into your system.
Been doing it this way for some time - 'tis amusing to see them try. It also has the side effect of those that scan for open ports when they find ssh not open tend not to scan for another SSH. / Mat