Using a non-standard port (i.e.Source: Windows Central (Image credit: Source: Windows Central) Would it be superior to either or both of the following other options?: Setup a VPN server to connect to your home network remotely. I'd just like to understand more precisely the nature of the threats that ssh opens me up to. on my Mac, or would they somehow be able to reach and control other devices on my network using my Mac as the access point?Īll this sounds pretty freaky, so I will definitely take the necessary steps to secure my network.
If yes, and if such a person found my hostname and IP, my Mac is still password-protected, so wouldn't that still provide decent security? (I admit though the password is super lame, so I'd need to beef it up).Īnd if they did manage to access my Mac via the ssh port, what would they be able to do? Would they only be limited to the files, passwords, settings, etc. Is it not a good idea because there are people out there who just scan the whole web with random hostname/IP generators looking for wide-open networks to exploit? Open the ssh port in the firewall on your router (not a good idea) A lot of corporate networks allow SSH out, but not all. Other Firewalls in between your host and where you're trying to reach it from may block SSH. Dynamically assigned addresses can remain 'fixed' for weeks, but there's no guarantee because that's how the tech works.
Your internal and external IPs are both subject to change in many configurations: Your internal addresses are assigned by DHCP if you basically just 'plug it in and go' and most basic home internet connections don't have static addresses either. Your Router also needs to be set up to allow the SSH protocol and to forward it to your internal device. This is what you see if you visit from the home Mac. You need to connect to the 'external' address which is shared by your internal devices.
This address is only locally relevant: If each house on your street has an internet connection, each may have their 192.168.1.12 device. Most home networks run a NAT config so your mac has an internal IP address like 192.168.1.12. This is more for #2, but you need a clear network path to your Mac.
0 kommentar(er)
