I close SSH port 22 (and what I use instead)
fail2ban and key-only auth are not enough. fwknop Single Packet Authorization keeps port 22 closed at the firewall, opens it for your IP for a few seconds, then closes it again.
Summary
Using fwknop for Single Packet Authorization allows you to keep SSH port 22 closed while still enabling temporary access for your IP address. This method enhances security beyond traditional measures like fail2ban and key-only authentication.
Comments (51 of ) ⌛