Been doing it this way for some time - 'tis amusing to see them try. It
also has the side effect of those that scan for open ports when they
find ssh not open tend not to scan for another SSH.
On Tue, 15 Nov 2005, Peter Dambier wrote:
Or run two daemons. One on port 22 does not allow ANY logins at all but
Moving sshd from port 22 to port 137, 138 or 139. Nasty eh?
just tracks incoming connections and attempts (and possibly allows to
block-list them in real time - typically not worth the effort though)
and another one on some higher port of your choice that is a real sshd
daemon for login into your system.