OCaml Forge
News

Forum: ssh-access-to-the-forge--moving-from-port-22-to-port-522

Posted by: Sylvain Le Gall
Date: 2016-09-04 13:26
Summary:SSH access to the forge: moving from port 22 to port 522
Project:Site Admin

TL;DR I have changed the SSH port to reduce the noise of SSH attacks.

As of today, the system has an average of 1 legit SSH connection per day (and this is from my own automatic system) and the system bans ~20 IPs per day because of people trying to brute force passwords. These attacks are actually pretty useless because the system doesn't allow password login.

Nevertheless, it triggers ~20 mails and this is a lot of noise for nothing. Changing the SSH port will remove 99% of these attacks (tested on other system) and what will remain are actually really dangerous ones (i.e. targeted attack or above average "script kiddies").

So I have decided to change the port of SSH to 522.

To use the new port, you need to change you .ssh/config and add these lines:

+Host *.ocamlcore.org
+ Port 522

If you want to connect to the system, you now need these comands:
$> ssh ssh.ocamlcore.org -p 522
$> scp -P 522 foobar.txt ssh.ocamlcore.org:

Thank you
Sylvain Le Gall

Latest News

Deprecating the Forge in 2017

Sylvain Le Gall - 2016-12-30 23:55 -

Forge migration to a new host, done

Sylvain Le Gall - 2016-10-14 06:42 -

Forge migration to a new host, now

Sylvain Le Gall - 2016-10-13 21:27 -

Forge migration to a new host, delayed

Sylvain Le Gall - 2016-10-09 23:27 -

Forge migration to a new host during the weekend

Sylvain Le Gall - 2016-10-08 08:53 -

Discussion Forums: ssh-access-to-the-forge--moving-from-port-22-to-port-522

Monitor Forum | Start New Thread Start New Thread