Jan Claeys (HE12025-03-25):
> > I should mention that having an internet facing ssh service is
> > usually a very bad idea. The 'better' approach is to have only a VPN
> > exposed and use heavy security on that. Once the VPN link is
> > established you can ssh through the VPN to internal systems.
> Why do you think SSH is less secure than any other VPN ? 

Why do you think Jan says ssh is less secure than a VPN when Jan is
saying that ssh is less secure than VPN+ssh?

I suggest to add port knocking to protect the VPN.

Regards,

-- 
  Nicolas George

Reply via email to