NS8 security hardening

[LayLow]

Hi,

Let’s see if we catch all the bright ideas on how to harden the security on NS8 servers that are exposed to any (inter)net and can only soley rely on the build in firewall(d).

One example is to change the default ssh port

Please vent your idea’s here.

[davidep (Davide Principi)]

Nice idea! Please do not forget the links to existing discussions around this topic, to avoid repetitions, for example

NS8 Change node SSH port 22 permanently

Hi all, while kicking off from the easy of use of NS7, I am trying to change the default ssh service port 22 to let’s say 777. firewall-cmd --help shows me a lot of info and also Documentation - Manual Pages - firewall-cmd | firewalld But obviously I am overwhelmed I now have changed the ssh config file (change port 22 to 777) and told firewall-cmd the following firewall-cmd --add-port=777/tcp --permanent Then restarted the service (required to take the changes into effect). …

[LayLow]

@davidep

Please do not forget the links to existing discussions

Exactly my point by providing the above example, but missing the context and discussion, correcto!

[oneitonitram (MrGenius)]

@LayLow

One example is to change the default ssh port

I watched one long video about wh changing default ssh port is not reat security best practice, and if preventing brute force, the the best option is to use other methods.