Asterisk Telegram -

SSH

1

OpenSSH , . , OpenSSH.


  • /etc/ssh/sshd_config - OpenSSH;
  • /etc/ssh/ssh_config - OpenSSH;
  • ~/.ssh/ - , SSH ;
  • ~/.ssh/authorized_keys ~/.ssh/authorized_keys - (RSA DSA), ;
  • /etc/nologin - , sshd root ;
  • /etc/hosts.allow /etc/hosts.deny - ( ). ACL;
  • SSH - 22
  SSH

-

SSH, . CentOS/RHEL :

chkconfig sshd off
yum erase openssh-server

SSH

SSH , . , . , /etc/ssh/sshd_config Protocol 2.


SSH

, SSH. SSH . , SSH root, merion networks:

AllowUsers root merion networks

, , :

DenyUsers root merion networks

, , (). :

ClientAliveInterval 300
ClientAliveCountMax 0

300 (5 ).


.rhosts

, . , SSH . :

IgnoreRhosts yes

!

Host-Based Authentication . :

HostbasedAuthentication no

root

root. , root . . su (sudo) . :

PermitRootLogin no

, , . Banner.


22 !

22 . , LAN. , Iptables 192.168.11.0/24:

-A RH-Firewall-1-INPUT -s 192.168.11.0/24 -m state --state NEW -p tcp --dport 22 -j ACCEPT

SSH . IP , . , 962 IP 192.168.11.24

Port 962
ListenAddress 192.168.11.24

. , , :)


. SSH :

Port 962
PermitEmptyPasswords no

INFO DEBUG :

LogLevel INFO

?