|
Advanced SSH security tips and tricks |
|
|
|
Monday, 02 April 2007 |
|
In this article I'll show you some simple tricks to help you tighten security for your secure shell (SSH) service. The SSH server configuration file is located in /etc/ssh/sshd_conf. You need to restart the SSH service after every change you make to that file in order for changes to take effect.
There are two versions of the SSH protocol. Using SSH protocol 2 only is much more secure; SSH protocol 1 is subject to security issues including man-in-the-middle and insertion attacks.You should not permit root logins via SSH, because this is a big and unnecessary security risk. If an attacker gains root login for your system, he can do more damage than if he gains normal user login. Configure SSH server so that root user is not allowed to log in.
Read all sshd tips at Linux.com |