I currently have ip restrictions set such that I can only SSH into my server from either the office or my home. I expect to travel around to various sites over the next few months and thus need to change this.

Is it relatively secure just to have key based auth (and turn password auth off) and expose the ssh port to anyone? Or should I look into dyndns or noip for my laptop and only allowing SSH from that account?



TBH, the IP restriction is crap in my opinion. Never used it in over 10 years I've been using Linux.

Just disable password authentication, root login and change the port. With these three things, you're 99.999999% safe from a SSH point of view, unless:

  • OpenSSH has a vulnerability.
  • You expose your private key.

Basically, just changing the port you will not receive any attack unless it's from someone that specifically wants to attack you.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.