To mitigate the effort to maintain my personal server, I am considering to only expose ssh port to the outside and use its socks proxy to reach other services. is Portknocking enough to reduce surface of attack to the minimum?
To mitigate the effort to maintain my personal server, I am considering to only expose ssh port to the outside and use its socks proxy to reach other services. is Portknocking enough to reduce surface of attack to the minimum?
Security though obscurity, BY ITSELF, is not security. But it’s great at slowing attackers and thwarting automated scripts.
It’s bad security to ignore possible mitigations to a problem just because it isn’t as full fix.