Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It's fallen out of favor these days, but if you're running on firewalls that can be configured for port knocking consider doing that. A non-sequential knock pattern that unlocks the remote IP for X amount of time can prevent a ton of grinding attacks.


Add a TLS auth channel to the portknock with a wait window and OTP and you are really in business with this approach.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: