I have OpenSSH on a server (key not pw). But I UFW everything except my own IP into the void on that port.
My IP is semi static from my ISP. It changes, but like once every couple years. My thinking is that an attacker would need some exploit to bypass UFW packet filtering and the OpenSSH vuln. Which would hopefully be enough to keep me safe if/when that ssh vuln hits.
I have OpenSSH on a server (key not pw). But I UFW everything except my own IP into the void on that port.
My IP is semi static from my ISP. It changes, but like once every couple years. My thinking is that an attacker would need some exploit to bypass UFW packet filtering and the OpenSSH vuln. Which would hopefully be enough to keep me safe if/when that ssh vuln hits.