The idea that setting up a series of hurdles is the path to a secure system is one of the most depressing misconceptions in modern security practice. Stacking in things on the principle that more steps is better is roughly equivalent to the current US airport security theatre.

These days, just having a strong password or key is enough to project your from roving bots. The remaining threat pool is "targeted attacker", and a targeted attacker isn't going to be affected by your port knocking or changed port or fail2ban.

- Les

You mean changing 'root' to 'thisisnotroot' doesn't really help my security?

_________________
Either provide enough details for people to help, or sit back and listen to the crickets chirp.
Security thru obscurity is a myth - and really really annoying.

>> The idea that setting up a series of hurdles is the path to a secure system is one of the most depressing misconceptions in modern security practice.

I've stated, clearly, twice, what it is and what I'm saying it is. Hurdles, using your term, are a deterrent. I have over a decade in the military and am speaking English as a sign of the fact that deterrents do work. They are not a guarantee, they are not a total solution. What they also do _not_ do is hurt to use them.

http://www.thefreedictionary.com/security+measures

"a precautionary measure warding off impending danger or damage or injury etc."

You could also Google "warding off".