LinuxQuestions.org - Angelo Fo. personal blog

Angelo Fo. Blog [My OpenSource Project News, previews & announcements of my free posts on http://digitalpatch.blogspot.com]

In this blog I'll talk you about my projects about GNU/Linux and solutions regarding security, software development and my own FOSS projects.

I will also publish "previews & announcements" of my free posts on DigitalPatch (Security Blog)

Note: Digital Patch Posts by Angelo Fonzeca are licensed under a Creative Commons Attribution-Noncommercial-No Derivative Works 3.0 Unported License and are based on a work at http://digitalpatch.blogspot.com

NOTE: If you are interested in IT Security, join us at "GNU/Linux Security & Hardening" group on Linkedin

OpenSSH daemon hardening ( Part 1 ) - Modify the configuration file [ANNOUNCEMENT]

Posted 12-10-2010 at 08:23 AM by angelo.fonzeca (Angelo Fo. personal blog)
Updated 12-13-2010 at 06:29 AM by angelo.fonzeca

Tags hardening, linux, openssh, security, setup

Introduction

OpenSSH is a daemon (a "service" in Unix environments) which helps system administrators to manage server remotely.
The SSH daemon is "similar" to "telnet" in the sense that it provides a remote shell for accessing Unix or GNU/Linux systems.
The main difference is that the latter doesn't use encryptation during the session, so it's easily to intercept the content of the communication between two machines (typically a client/server...

angelo.fonzeca

PerseusGuard Developer

Posted in Linux Security

Views 1825 Comments 0 angelo.fonzeca is offline

OpenSSH daemon hardening ( Part 2 ) - How to use RSA/DSA Keys [ANNOUNCEMENT]

Posted 12-10-2010 at 08:19 AM by angelo.fonzeca (Angelo Fo. personal blog)
Updated 12-13-2010 at 06:30 AM by angelo.fonzeca

Tags dsa, linux, openssh, rsa, security

[Note: This is a draft version of the post; it'll be revised as soon as possible]

Introduction

In my previous post, I explained you how to configure OpenSSH for improving its security. By the way, if your SSH service is available on the Internet and accessible by any IP address (e.g. You connect your client on the internet with a dynamic IP address and/or you want reach your server from anywhere...), it can be more exposed to brute force attacks! So a new "hardening...

angelo.fonzeca

PerseusGuard Developer

Posted in Linux Security

Views 1625 Comments 0 angelo.fonzeca is offline