LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian
User Name
Password
Debian This forum is for the discussion of Debian Linux.

Notices


Reply
  Search this Thread
Old 06-04-2005, 06:46 AM   #1
Artik
Member
 
Registered: Apr 2005
Location: Israel
Distribution: Debian 3.1 Sarge, Ubuntu Breezy
Posts: 223

Rep: Reputation: 30
Remote access


Hello,

I use my computer at home and I'd like to get SSH access. I know the easiest way is to open SSH port in Firewall but... I need following:
  1. I want to have only one user to get the access and I want to use different password for him.
    Because it is home computer I don't want to setup complex passwords for users. However if I open SSH I don't want my computer to be opened for everyone. I want to use one complex password like "jk@#wa62$s" for one user and I don't want to enter it when I use computer daily - for SSH only.
  2. Because I have sometimes problems with closed outcoming ports (for example at work by my sysadmin) I want to use not default SSH prot but something like 80 for SSH access which is allways opened. I don't run HTTP server on it

How can I do this?

Can I also setup FTP access for one user with different password (I don't care about secure transfer)?

Thanks
 
Old 06-04-2005, 08:15 AM   #2
kostian
Member
 
Registered: Jul 2004
Location: LT
Posts: 150

Rep: Reputation: 15
edit your /etc/ssh/sshd_config to include
AllowUsers your_special_ssh_user_here
and then use "su" to switch to your "real" user. Also Im not sure if running sshd on 80 port is a good idea.
 
Old 06-04-2005, 10:49 AM   #3
Artik
Member
 
Registered: Apr 2005
Location: Israel
Distribution: Debian 3.1 Sarge, Ubuntu Breezy
Posts: 223

Original Poster
Rep: Reputation: 30
Quote:
Originally posted by kostian
edit your /etc/ssh/sshd_config to include
AllowUsers your_special_ssh_user_here
and then use "su" to switch to your "real" user. Also Im not sure if running sshd on 80 port is a good idea.
Thanks... it works.

The reason that I setup ssh on 80 is that 22 is restricted for outcoming at my work (and sysadmin don't want to open it) so I use something that is opened...

And one more does anybody know a good guide to setup wu-ftpd
 
Old 06-04-2005, 10:57 AM   #4
Ephracis
Senior Member
 
Registered: Sep 2004
Location: Sweden
Distribution: Ubuntu, Debian
Posts: 1,109

Rep: Reputation: 50
If you want to run at port 80 just change it to that in the sshd_config. I understand your dilemma with the sysadmin at work but you should know that there are people out there, scanning computers on port 80 (and other public ports) so this will make your box more interesting. Just a thought.

But, check out sshd_config and at the top you will see
Port 22
 
Old 06-05-2005, 11:08 AM   #5
Artik
Member
 
Registered: Apr 2005
Location: Israel
Distribution: Debian 3.1 Sarge, Ubuntu Breezy
Posts: 223

Original Poster
Rep: Reputation: 30
Ok running on port 80 was bad idea... something gets wrong and it doesn't connect from Windows network (maybe because of Antiviruses) from one of linuxes I've get connection...

Interesting question is:

What are the ports that are usually opened for outcoming that I can put ssh on them???

More serious question is:
Ufff... How can I convince the sysadmin of that it is safe to open 22 port...
 
Old 06-05-2005, 12:14 PM   #6
Ephracis
Senior Member
 
Registered: Sep 2004
Location: Sweden
Distribution: Ubuntu, Debian
Posts: 1,109

Rep: Reputation: 50
Here is what I would have done:

Make your sshd run on some random, high port like XXXXX, so most portscanners out there won't notice the port (only full port scan would detect it, nmap for example won't do this by default). ~50000 might work.

Then tell your sysadmin that you have a good reason for accessing your computer at home and tell him that SSH Protocol 2 is secure if someone would happen to sniff the network or something, and that you will run at a high port so script kiddies won't see the communication as anything interesting.

Good luck.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
remote access linuxmandrake Linux - Software 1 09-27-2005 05:27 PM
How To Remote Access? Rundi Linux - Networking 3 06-21-2005 06:54 AM
Remote Access JRago Linux - Networking 0 03-16-2004 01:17 PM
Remote Access ziegler Linux - General 6 05-02-2003 12:26 PM
No remote access. twhunt Linux - Security 2 03-20-2002 01:34 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian

All times are GMT -5. The time now is 10:11 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration