it would be a good idea to not have webmin running all the time... just start it via ssh when I need it...
so, I just stop webmin,and leaving SSH always running... when I need to access webmin, I start it through SSH.
but there are lots of people from many country trying to bruteforce my SSH. I can reduce bruteforce using iptables.
but because Im feeling still not safe (about 3 months ago), so I stop SSH and leaving webmin always running through custom port. I just start SSH through webmin when I need. and the result, no more bruteforce on SSH, and no bruteforce on webmin (maybe because the attacker dont know my webmin custom port)
but I think this is still not really safe. and I cannot restrict access to some IP because I use random IP. If I stop both SSH and webmin, I will lost access to my server.
Anyone know the better way dealing with this?