Security basics

[Alan M. Evans]

On Wed, 2007-10-03 at 15:40 -0500, Steve Siegfried wrote:

> Changing ports for ssh isn't actually that hot of an idea.  Most port scanners
> can detect ssh implementations since they normally self-identify.  For example,
> if you're running ssh on the normal port (22), try executing:
> 	/usr/bin/telnet YOUR.HOST.IP.ADDR 22
> and see what pops out.

Of course. But most attacks aren't scanning every port on your machine
and trying to identify unknown services. Mostly they're just going for
the low-hanging fruit on the standard port numbers.