Start by questioning your assumption. What makes you think changing a port provides any security? Why do you suppose that massive web sites don't do that? Nope. If I target your server, it takes all ...