this post was submitted on 29 Sep 2024
5 points (100.0% liked)
Cyber Security
39 readers
1 users here now
π΅πΏ Surveillance, Information security, Cybersecurity, Interoperability, Analytics, Data tracking, Digital Disinformation, Decentralised Finance, Algorithmic Sovereignty & Privacy By Design.
Questions and answers are encouraged. Be excellent to each other. ποΈ
founded 4 months ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Port knocking and actual firewall rules are far better for ssh that must be visible publically. VPN only otherwise.
I have not understood why VPN is mentioned as a more secure alternative. Or is it always meant as VPN in addition to ssh?
Itβs more secure to use a VPN to gain access to the network where you can access internally the services you need rather than expose many individual services to the open internet.
If I need to access something on my home network Iβm not going to port forward everything through the firewall. Iβm just going to use my vpn to remote in and then ssh to the system. Obviously keep your vpn server patched and up to date.
Sure, but my question was about exposing ssh compared to exposing a VPN.
Honestly, one isn't better than the other. It's more of a "what can they do" if they gain access. With SSH you likely have terminal access wherever. VPN means you need to be able to talk to the service and even then it's usually just network access. Attackers have to break in further once there.
I would rather neither, but of the two I have good firewall rules internally. And failed ssh access internally is reported immediately.