In order to increase security, for example on ssh remote connections, I:
- open a non stardard port.
- use mandatory digital certificates for authentication.
- allow connection from a ip range only.
But I wonder if this is enough to protect my ssh remote access. I was wondering if there is any script or solution doing this:
listen on syslog and filter ssh access intents.
if a predefined ports sequence is detected, then open for some minutes your non standard ssh port, then close it again if there is no active session.
So this is a "ports key" implementation. Do you know if a similar solution exists? Do you think such a tool is interesting to increase security levels?