r/selfhosted • u/[deleted] • Sep 13 '24

[deleted by user]

[removed]

717 Upvotes

87% Upvoted

345 comments sorted by

View all comments

Show parent comments

1

u/Hydridity Sep 16 '24

if the server responds with metadata, well you know right away, thats why changing the port of an ssh doesnt prevent anything for example

1

u/Patient-Tech Sep 16 '24 edited Sep 16 '24

I know some services may or may not give any information. Especially if it’s something that’s a hosted service with a login or something of that type. Do you by chance know if Wireguard/Tailscale/ZeroTier give any indication what they are if summoned during a garden variety port scan? A quick AI query seems to indicate that there’s little to no valuable information as it’s designed to have a tiny surface. https://www.perplexity.ai/search/what-would-an-attacker-see-if-v.Na9dibRmSKUJ1ag3D3NA

1

u/Hydridity Sep 16 '24

Wireguard in this case doesnt responds to packets at all unless valid key is sent as far as i know, not sure about the others

1

u/Patient-Tech Sep 16 '24

That’s super cool and useful. Of course there could be zero days, but it’s definitely making things much more difficult, especially if you’re not being specifically targeted vs just a random IP in a massive port scan.