To mitigate the effort to maintain my personal server, I am considering to only expose ssh port to the outside and use its socks proxy to reach other services. is Portknocking enough to reduce surface of attack to the minimum?
To mitigate the effort to maintain my personal server, I am considering to only expose ssh port to the outside and use its socks proxy to reach other services. is Portknocking enough to reduce surface of attack to the minimum?
Because then:
Use a secure password or key. Security by obscurity is no security.
That is not the point that was made. Once access to sudo or root you already have lost.
Defense in depth.
Anyone who’s certified NET+ or higher knows this.