Re: [Hampshire] Ssh

Top Page

Reply to this message
Author: Keith Edmunds
Date:  
To: hampshire
Subject: Re: [Hampshire] Ssh
On Sat, 15 Jun 2013 16:34:27 +0100, linux@??? said:

> Other than changing the default port can anyone recommend anything else
> I should be doing to increase network security?


- disallow root logins via ssh
- disable password authentication: use keys only
- use something like fail2ban to block IP addresses with persistent login
failures
- ideally, firewall access to your ssh port (not always possible)
--
"You can't live a perfect day without doing something for someone
who will never be able to repay you."

--
Please post to: Hampshire@???
Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire
LUG URL: http://www.hantslug.org.uk
--------------------------------------------------------------