airgapped

Setting a random SSH port and limiting it to 3/min saw failed login attempts fall by 99% and jailed IPs fall to 0.

A reverse proxy saves you from having to expose your services directly and acts as a go-between.

Internet <--> Reverse Proxy <--> Service

Nice tips! Personally will use SSH aliases and canonicalised hostnames.

Other topics covered in post:

• Forward Yubikey Agent
• Reuse connections
• SSH straight into tmux
• Alias commonly used hosts
• Do not add testing stuff to ~/.ssh/known_hosts
• Make connections last longer
• Canonicalize hostnames
• Yubikey and GitHub, without touching it every time

This week I finally managed to route torrent traffic through a VPS that was sitting around gathering dust. I am behind CGNAT so was taking me 6 weeks to do the kind of traffic I do in a day now. I couldn’t be more chuffed.