Make SSH more secure

namit · 02-10-2006, 12:44 PM

I am just learning about linux am running ssh on my server debian server and just wondering what the best way would be to lock down ssh.

Do not like the idea that people can just say go into putty and type in my ip address and get up my login prompt.

Maybe this is how everyone has it and its ok but i am not that happy with having it this way.

Am i being paranoid?

Or is there a better way of setting up ssh?

bulliver · 02-10-2006, 01:02 PM

Quote:

Do not like the idea that people can just say go into putty and type in my ip address and get up my login prompt.

Use key-based authentication.
Disable password authentication.
Disable root logins
Run ssh on non-standard port (not real security, but gets rid of scripted attacks)

namit · 02-10-2006, 01:14 PM

thanks have done that

int0x80 · 02-10-2006, 02:03 PM

Here are some additional links to check out:

http://www.linuxsecurity.com/resourc...s.en.html#s5.1
http://www.debian-administration.org/articles/87

spooon · 02-10-2006, 03:43 PM

also install denyhosts ("apt-get install denyhosts" from unstable)

taylor_venable · 02-10-2006, 09:51 PM

If you only need access to the service from certain machines, use a firewall to restrict access to port 22 on your server.