To mitigate the effort to maintain my personal server, I am considering to only expose ssh port to the outside and use its socks proxy to reach other services. is Portknocking enough to reduce surface of attack to the minimum?

  • surewhynotlem@lemmy.world
    link
    fedilink
    English
    arrow-up
    9
    ·
    1 year ago

    Security though obscurity, BY ITSELF, is not security. But it’s great at slowing attackers and thwarting automated scripts.

    It’s bad security to ignore possible mitigations to a problem just because it isn’t as full fix.