I am by no means an expert in online security so I wanted to outline the steps I am taking to remain as safe as possible yet still make it as easy as possible to gain access to my system from anywhere (within reason).
I have set up an
openssh-server on my linux (
debian wheezy) PC and enabled port forwarding for port 22. I have also installed the
DenyHosts package and set it up with the default parameters (block IP addresses after 10 invalid attempts at the correct username, or 5 invalid username guesses). I have disabled root access directly (ie. attempting to log in as
root will fail and after the next attempt your IP will be blocked).
I have allowed only a single user account to be accessible and have used a password that I would consider secure (upper and lower case letters and numbers, nothing obvious or related to me).
Is this a safe setup? Are there any obvious security concerns that I am missing?
I understand that "best practice" is to use a public/private key pair, but I am concerned that this will make it too difficult to log on from a new computer. So suppose I take my laptop (or the device of someone I trust) and use it to log on via
putty from the local starbucks or internet cafe. Is this safe, given my current setup? And if not, what would I have to change to make it safe?
I hope these questions aren't too vague. I'm relatively new to this subject.