[arch-general] HTTP spam from China

[Juha Kankare]

On 26/02/2019 18:40, Ralph Corderoy wrote:
> Hi Juha,
>
>>> It's why I keep my SSH servers on a non-standard port. I know it
>>> doesn't prevent someone from discovering it, but it cuts out 99.99%
>>> of all those attacks, being able to filter out connection attempts
>>> to port 22
>> Same. For easy ports to remember, I like to combine powers of two
>> (e.g.  25664 (256-64) or 25632). Easy to remember and non-standard.
> I go for $RANDOM that's five digits and a valid port number.
> To avoid remembering it, I add it to ~/.ssh/config, e.g.
> `ssh foo' with
>
>      Host foo
>      Hostname foo.bar.xyzzy.com
>      Port 16747
>
Well, I have to access my server from multiple computers, including some 
where I can't use personal accounts and/or don't feel safe saving the 
location and port of my server to. I do have ~/.ssh/config set up on all 
my personal devices.

-- 
Juha Kankare