ssh from outside my lan?

danimal87 · 09-03-2005, 04:45 PM

ok, so I just installed ssh on my ubuntu box and I can ssh into it from windows boxes on the same router but how do I set it up so that I can get to it from a different network? A wifi hotspot for instance or a friends house.

pnellesen · 09-03-2005, 05:28 PM

You'll need to have your router forward incoming port 22 traffic to your Ubuntu box.

danimal87 · 09-03-2005, 06:39 PM

thanks, now what are the security implications of this? Am I prety much opening myself up to get owned, and if so what should I do to batten down the hatches.

comprookie2000 · 09-03-2005, 07:09 PM

Hope this gets you started, there are many different ways of making it more secure.
http://www.openssh.com/faq.html
One way is to limit access, for gentoo I do this;
Limit SSHD Access

Deny access to everyone, including root, except user1 and user2.

Edit /etc/ssh/sshd_config:
File: /etc/ssh/sshd_config

AllowUsers user1 user2
PermitRootLogin no

slackie1000 · 09-04-2005, 10:35 AM

hi there,
adding to comprookie2000 answer's I would disable password authentication and use something like pubkey...
with that, you have control to users and parallel to that with the encryption key..
just my

regards,
slackie1000