Jan Claeys (HE12025-03-25): > > I should mention that having an internet facing ssh service is > > usually a very bad idea. The 'better' approach is to have only a VPN > > exposed and use heavy security on that. Once the VPN link is > > established you can ssh through the VPN to internal systems. > Why do you think SSH is less secure than any other VPN ?
Why do you think Jan says ssh is less secure than a VPN when Jan is saying that ssh is less secure than VPN+ssh? I suggest to add port knocking to protect the VPN. Regards, -- Nicolas George