Comment by fak3r

3 months ago

This has been my practice for 20+ years of running SSH, that and using Ansible to keep sshd hardened. https://github.com/dev-sec/ansible-collection-hardening/tree...

1 comment

fak3r

I also harden my sshd_config.

I mainly disabled all legacy cryptography and types of tunnelling/forwarding that I don't rely on:

I also only expose SSH on public interfaces on one machine; all other machines have SSH over VPN.