On Wed, 2007-10-03 at 15:40 -0500, Steve Siegfried wrote: > Changing ports for ssh isn't actually that hot of an idea. Most port scanners > can detect ssh implementations since they normally self-identify. For example, > if you're running ssh on the normal port (22), try executing: > /usr/bin/telnet YOUR.HOST.IP.ADDR 22 > and see what pops out. Of course. But most attacks aren't scanning every port on your machine and trying to identify unknown services. Mostly they're just going for the low-hanging fruit on the standard port numbers.
