@dev_all_the_ops - eviltoast
  • 0 Posts
  • 14 Comments
Joined 11 months ago
cake
Cake day: November 2nd, 2023

help-circle
  • Port forwarding will work, but it has major downsides

    1. Will draw attention of bots
    2. Secure as long as there are no security holes in openssh (which is rare but has happened)
    3. You _must_ harden the ssh server by disabling password auth, putting behind fail2ban

    There are far better and safer alternatives that I would recommend over exposing a raw port to the world.

    1. Tailscale
    2. Wireguard/OpenVPN