Hacker News Reader

"Use a non-standard port: I'm not a big fan of security through obscurity and it doesn't work well for ssh."

When I had sshd running on the standard port on my MacMini, it would often slow down and start spinning the fan like crazy while some cracker was bruteforcing accounts and passwords. Now that I have it on a non-standard port, that never seems to happen anymore.

View on HN

That's good for your mac mini, but not a normal use case for a server running sshd (needing to be quiet, that is). Something that might also work for you would be to limit inbound access from known-trusted ip ranges, as well.

Running sshd on a nonstandard port isn't in itself a bad idea (other than the potential difficulty of logging into the server later if you forget the port or something), but it shouldn't be considered a strong security measure at all.

A normal use case for a server would not be keeping quiet, but conserving energy is very much on server people's mind.

Absolutely! However, I would argue that if you are looking to conserve energy, moving the sshd port is not something that should be at the top of your list. :)

fail2ban (also mentioned in the article) would help you too..

Reply on news.ycombinator.com