Any feedback from port knockers ?
en.m.wikipedia.org
To mitigate the effort to maintain my personal server, I am considering to only expose ssh port to the outside and use its socks proxy to reach other services. is Portknocking enough to reduce surface of attack to the minimum?
You are viewing a single comment
Defense in depth.
Anyone who's certified NET+ or higher knows this.
That video here: https://youtu.be/fKuqYQdqRIs?feature=shared
Does a great job actually explaining a lot of my points. And it is produced by an actual security auditor and researcher. Just because everyone is doing it does not make it a security benefit that matters.
Here is an alternative Piped link(s):
https://piped.video/fKuqYQdqRIs?feature=shared
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I'm open-source, check me out at GitHub.