top | item 30382851

(no title)

steffan | 4 years ago

Even if you don’t have a static IP, you can probably restrict to a /24 subnet or maybe /16.

Additionally, you can ensure password access is disabled and use ssh keys along with 2FA.

discuss

order

dx034|4 years ago

My ISP has at least 10 ranges (a result of the shortage and mergers) and there's little info about which ranges I could get IPs from.

hitsurume|4 years ago

Just curious but what would adding a /24 or /16 do if we're still allowing 0.0.0.0?

1123581321|4 years ago

You would set it based on the range your ISP tends to assign you, and remove 0.0.0.0 for the ssh port.