LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 07-27-2008, 03:41 PM   #1
Romanus81
Member
 
Registered: Feb 2008
Posts: 201

Rep: Reputation: 31
College Campus: Accessing my PC from my Laptop safely?


I am getting an MSI Wind for my laptop in college, because I wanted something small and light that I could easily carry around with me. I am also bringing my PC for gaming and using CD's, since the MSI Wind doesn't have a CD drive. I believe the dorms all have wired internet access, and the rest of the campus is on wi-fi.
Can anyone point me to some FAQ's or reading material for setting up SSH so that I can get to files from my PC when I am somewhere else on campus? Is there any risk when I use SSH that someone else on campus could get into my PC?
 
Old 07-27-2008, 04:12 PM   #2
MS3FGX
LQ Guru
 
Registered: Jan 2004
Location: NJ, USA
Distribution: Slackware, Debian
Posts: 5,852

Rep: Reputation: 361Reputation: 361Reputation: 361Reputation: 361
There isn't much need for a guide, all Linux distributions are going to ship with the SSH client, and running an SSH server is just going to be an option in the boot scripts. Most distributions are set with sane defaults for the server, but you should still look over them to make sure (you didn't mention the distros involved here).

Using strong passwords is an absolute must (but of course, it always is) and since you are going to always connect with the same client machine it would be a good idea to use passkeys so that the server only accepts logins from the Wind.

The SSH server itself is quite secure when configured properly. Brute forcing the password is next to impossible when using timeouts and a low simultaneous client count; but you could even augment that with an automated blacklist script to block the IPs of any machines that really don't get the message. In terms of vulnerabilities, there have been some DoS attacks against SSHD in the recent past, but if you are using an updated version I am not aware of any serious remote vulnerabilities.
 
Old 08-08-2008, 12:10 AM   #3
pAn1k
Member
 
Registered: Jun 2004
Location: Cala city
Distribution: Suse 10.0; Debian 5.0 (Lenny) Fluxbox
Posts: 240

Rep: Reputation: 30
When I was in school, I literally used ssh every day from my laptop on campus to my server at home. I could transfer papers and whatever else I needed. Safe and secure; no problems.
 
Old 08-15-2008, 05:36 PM   #4
Romanus81
Member
 
Registered: Feb 2008
Posts: 201

Original Poster
Rep: Reputation: 31
Thank you, are there any faq's I can read that can help me get this set up? I go through the netconfig setup, and it asks me to give a hostname and domain name, hostname is the think that pops up in a terminal, right? "user@hostname"
Is there a page for absolute newbies on how to start?
 
Old 08-15-2008, 06:55 PM   #5
johnson_steve
Senior Member
 
Registered: Apr 2005
Location: BrewCity, USA (Milwaukee, WI)
Distribution: Xubuntu 9.10, Gentoo 2.6.27 (AMD64), Darwin 9.0.0 (arm)
Posts: 1,152

Rep: Reputation: 46
I wouldn't allow password logins at all just keys. that way no one can log in unless they have your laptop. you can even use sshfs to mount your desktop drive on the laptop over ssh and use it just like any other drive. I'll help you set it up if you'd like. do you have both computers? what distro are they running? are you going to have a static IP or dhcp for the desktop?

Last edited by johnson_steve; 08-15-2008 at 06:59 PM.
 
Old 08-15-2008, 08:18 PM   #6
Romanus81
Member
 
Registered: Feb 2008
Posts: 201

Original Poster
Rep: Reputation: 31
Both are dhcp running slackware, but I think I would rather prefer to try and figure this out on my own, so that I know what I broke if I change something. Is there a good website I can try?
 
Old 08-15-2008, 09:43 PM   #7
johnson_steve
Senior Member
 
Registered: Apr 2005
Location: BrewCity, USA (Milwaukee, WI)
Distribution: Xubuntu 9.10, Gentoo 2.6.27 (AMD64), Darwin 9.0.0 (arm)
Posts: 1,152

Rep: Reputation: 46
lots of good stuff over at www.tldp.org just do a search for ssh. let me know if you get stuck.
 
Old 08-17-2008, 12:36 AM   #8
Romanus81
Member
 
Registered: Feb 2008
Posts: 201

Original Poster
Rep: Reputation: 31
Alright, I'm still trying to get my laptop's wifi working, until then, I did find a faq online that taught me how to make a public key, and I put that on my PC (slackware 12.1)
$ ssh-keygen -t dsa
The next part of the faq said to add it to the server: [here]
Using this command:
$ scp id_dsa.pub serverusername@192.168.1.40:./id_dsa.pub
Now, both PC's are running on DHCP at the moment, I'm not sure about how my college campus is going to be setup, but they said It will be wired ethernet in the dorms and wifi out of the dorms in some places around campus.
Say my login shell for my PC says user@pc while my laptop is user@laptop, so would my command be my user@alpha:./id_dsa.pub or would I use the ip I am using at the time? If I want to ssh into my laptop would I use
user@pc:~$ ssh user@laptop?
If I had my wifi working now I would try it out, but my PC is going in a box tomorrow to be shipped to college and it looks like the wifi drivers don't want to work for me any time soon.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: How to check mail safely with your laptop LXer Syndicated Linux News 0 08-26-2007 06:30 PM
networking on a college campus raim1312 Linux - Networking 4 04-02-2007 06:42 PM
Safely accessing /dev/mem anothershura Programming 5 04-20-2006 03:43 AM
Connect a Laptop at a campus Network alekoos Linux - Networking 2 04-26-2004 07:30 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:41 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration