[Ach] Feedback to applied-crypto-hardening.pdf - Webservers - OpenSSH

[Alice Wonder]

On 12/22/2017 03:57 AM, Torge Riedel wrote:
> Hi list,
>
> continuing my feedback with SSH / OpenSSH:
>
>
> # cat /etc/os-release
> NAME="Ubuntu"
> VERSION="16.04.3 LTS (Xenial Xerus)"
> ID=ubuntu
> ID_LIKE=debian
> PRETTY_NAME="Ubuntu 16.04.3 LTS"
>
> # ssh -V
> OpenSSH_7.2p2 Ubuntu-4ubuntu2.2, OpenSSL 1.0.2g  1 Mar 2016
>
> The guide is working for me.
>
> Maybe there is one hint to offer in the guide: Change the port of sshd
> to somewhat else than 22. I observed massive reduction of sshd attacks
> on my servers after changing the port.
>
> Regards
> Torge
>

Indeed, that's fairly standard. Wasn't aware it wasn't in the guide.