On: Why Putting SSH On Another Port is a Good Idea

[zorbo]

VPN is not mutually exclusive with using SSH. What he's saying is that people should firewall their SSH ports to only allow access from trusted IPs, and VPN's make that easier to do.

[__david__ → zorbo]

So that means you can't SSH into your remote machine from an arbitrary connection? What do you do when you're traveling?

[fletchowns → __david__]

You use a VPN and then connect to SSH

[__david__ → fletchowns]

So then we go back to my original question. Why do you think a VPN is more secure than SSH?

IE, Why is it important that your SSH port only be connected to by known IPs, but your VPN port is OK to be connected to from anywhere?

[fletchowns → __david__]

It's not really about one being more secure than the other. They are both very secure. It's just good to have multiple layers of protection in case something goes wrong somewhere, whether it's caused by human error or something else.

[solnyshok → __david__]

VPN into it?

[marcosdumay → zorbo]

Yes, in a sense those things are mutually exclusive.

You can get in a network by VPN or SSH. Yes, after that you can also log into a computer by SSH, but the question remains - why access the network by VPN instead of SSH?