<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class=""><div class=""><br class="">Message: 1<br class="">Date: Thu, 7 Dec 2017 16:33:23 -0500<br class="">From: Brian <<a href="mailto:triembed@undecidedgames.net" class="">triembed@undecidedgames.net</a>><br class="">To: <a href="mailto:triembed@triembed.org" class="">triembed@triembed.org</a><br class="">Subject: Re: [TriEmbed] [TAR] PiTunnel<br class="">Message-ID: <<a href="mailto:5A29B3A3.3000106@undecidedgames.net" class="">5A29B3A3.3000106@undecidedgames.net</a>><br class="">Content-Type: text/plain; charset=windows-1252; format=flowed<br class=""><br class="">If you want to cut down on the amount of hammering your SSH server gets <br class="">from the world at large (and it will get hammered, trust me[0]), you can:<br class=""><br class="">- Set up firewall rules that block attempts from anywhere but places you <br class="">expect to be (at a risk of being locked out if you're somewhere new), or<br class="">- Configure SSH to listen on a nonstandard port [1]<br class=""><br class="">I use a combination of both: my more-secure system has firewall rules, <br class="">but another system accepts connections on a non-standard port. Then, if <br class="">needed, I can connect to the secondary system with a key, from anywhere, <br class="">and open a hole in the firewall if necessary.<br class=""><br class=""><br class=""></div></div></blockquote><br class=""></div><div>You can also set up fake ports that scanners like which will hold open connections and slow them down considerably:</div><div><a href="https://www.symantec.com/connect/articles/slow-down-internet-worms-tarpits" class="">https://www.symantec.com/connect/articles/slow-down-internet-worms-tarpits</a></div><div><br class=""></div><div>There’s also denyhosts, which blacklists source IPs which try to log on to your host too many times: <a href="http://denyhosts.sourceforge.net" class="">http://denyhosts.sourceforge.net</a></div><div><br class=""></div><div>Don’t bother sending your self alerts on port scans, they are extremely common and you will drive yourself nuts.</div><div><br class=""></div><div>Alex</div><br class=""><div class="">
<div style="color: rgb(0, 0, 0); font-family: Monaco; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br class="Apple-interchange-newline">|\ | (¯ \/ |¯\ |V| |\ ¯|¯ |¯) | \/ | | | |¯\ (¯ /¯ /\ |V|</div><div style="color: rgb(0, 0, 0); font-family: Monaco; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">|-||_ (_ /\ |_/ @| | |-| | | \ | /\ |^| | |_/ (_ . \_ \/ | |</div><br style="color: rgb(0, 0, 0); font-family: Monaco; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br style="color: rgb(0, 0, 0); font-family: Monaco; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br style="color: rgb(0, 0, 0); font-family: Monaco; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br style="color: rgb(0, 0, 0); font-family: Monaco; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br style="color: rgb(0, 0, 0); font-family: Monaco; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br style="color: rgb(0, 0, 0); font-family: Monaco; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">
</div>
<br class=""></body></html>