Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm planning to install a small server with 3G-based internet connection in my cabin in the mountains. I will install an ssh server and a web server, both on non-standard ports and use to get a public name.

How much traffic can I expect from random sources like port-scanners and probes trying to connect, will it bust my data plan ?

(My server at home sees thousands of login attempts via ssh every day, which sounds like a really bad idea over 3G....)

share|improve this question
You should move your sshd to a different port other than the default. – LawrenceC Jun 16 '13 at 13:55
how many MB do you get a month? How much data is the web server going to use? A packet can be 1520 bytes, if you immediately drop port scanners and etc. you can get 680 drops per MB worst case. Assuming the packets has a payload. – cybernard Jun 16 '13 at 14:54
It turns out my service provider only deals out private IP's to 3G based connections, so there is no sensible way to get an always-on public site with my current telco. – krosenvold Aug 12 '13 at 8:03
up vote 1 down vote accepted

Nice thought about that cabin in the mountains system.
Port-scans are usually not full sized packets. Keeping the packet-rate high (with small packets) is a good scan intent for performance.

You should invest in a firewall to not even respond to such scans (no RST packets).

A more important questions is -- how popular is your web-server. If your intent is to host things that will be shared to many people, they will cause a lot of 'upload' for your 3G connection. As your public site reference gets known to Internet indexing systems it will be accessed often by automatic systems.

But, maybe this is the intent of your server-in-the-mountains. If so, the ratio of this legitimate access volumes against background accesses (like port-scanning) will probably turn out to make the latter quite insignificant.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .