Just trying to see how many people would be in favor for opening a port on a router, like port 22 or something similar for ssh, to all outside WAN connections or just a set of specific WAN ip's for that service. This would be done in an attempt to reduce the service being hacked. The protocol is ssh, using, best practices for deploying ssh of course. It has come to my attention that it is best to block connections to that port and let only a handful of outside IP addresses be able to connect from the locations of the known users.
Is this overkill? I have usually opened up the port on a router for users as they need these services or have been requested to open the port for software/hardware vendors that need access to their locations. Am I being paranoid or is there a specific time/application where hardening it to that degree is necessary? Thanks.