BSD Cafe Billboard

Port knocking is mostly a bad idea. But people keep wanting to do it, for some false sense of security. If you don't consider it a security control but a way to keep garbage out of your logs, it might be valid. In my case I'm using an old USG Pro 4 running OpenBSD as my firewall and I'd prefer to avoid writing stuff to the logs, as I'd prefer the flash not to wear out sooner than needed, definitely not thanks to background radiation on the internet. https://dgl.cx/2026/06/ssh-port-knocking-with-openbsd

Speed up file transfer by streaming tar through an SSH tunnel. https://cromwell-intl.com/open-source/tar-and-ssh.html ping: https://mstdn.social/@conansysadmin/116725222021196139

Pro tip: set `UseDNS no` in your sshd_config to disable reverse DNS lookups for every single ssh connection to your host.It provides no filtering or validation purpose, afaik, and seems to only generate excess DNS traffic.This lesson brought to you by the 66k DNS lookups in the past 24hrs from a single public facing forgejo jail.#FreeBSD #SSH #DNS