On: Show HN: A proactive way of securing your Linux se...

[Tepix]

Running SSH on a non-standard port gets rid of the brute force login attempts, too.

[zootboy → Tepix]

In my experience, a non-standard port reduces the number of brute force attempts, but it doesn't eliminate them. I just do a simple rate limit on syn packets to the port and use SSH keys for auth, and that feels like plenty of security.