Sometimes I don't have a static IP and need to administrate my web server remotely. I'm looking for any additional layers of protection I could add to make opening port 22 safer.
Currently I have disabled root password login via SSH. It requires RSA key to login (the private key is stored on a usb smart card).
Are there any known risks with my configuration if port 22 was opened to the public? Besides port 22, iptables only has port 80 and port 443 open to the public.
I'm using a Windows computer to connect to Centos 6 Linux with Putty.
Are there any additional statements I can add to the firewall or SSH config to further limit access to port 22 to only my specific computer so that the port doesn't appear open to people scanning ports? I'm using iptables for the firewall currently.