a record?

Matthew Sullivan matthew at sorbs.net
Tue Nov 15 06:46:26 UTC 2005


william(at)elan.net wrote:

> On Tue, 15 Nov 2005, Peter Dambier wrote:
>
>> Moving sshd from port 22 to port 137, 138 or 139. Nasty eh?
>
> Or run two daemons. One on port 22 does not allow ANY logins at all but
> just tracks incoming connections and attempts (and possibly allows to
> block-list them in real time - typically not worth the effort though) 
> and another one on some higher port of your choice that is a real sshd 
> daemon for login into your system.
>
Been doing it this way for some time - 'tis amusing to see them try.  It 
also has the side effect of those that scan for open ports when they 
find ssh not open tend not to scan for another SSH.

/ Mat



More information about the NANOG mailing list