Hacker News new | ask | show | jobs
by cube00 1659 days ago
Keep in mind the danger that if the SSH server crashes other non-privileged users on that box can launch a fake server on that >1024 port to take its place.
3 comments

But unless the non-privileged users have access to the ssh key files - definitely not allowed in any sane set-up - their MITM sshd will be throwing big, obvious error messages at most of the users. (Which is the mechanism protecting you against MITM's via all sorts of "intercept the packets" network attacks.)
Huh. I wasn't aware of this vector.

My servers only have `root` and my own sudo user, (and other default system users). I also run all apps on Docker. I don't think this would be an issue for me.

I guess you could probably setup a port rewrite firewall rule? Translate 10000 to 22, for instance and have 22 blocked for external connections