SSH

1

3

OpenSSH , . , OpenSSH.

  • /etc/ssh/sshd_config - OpenSSH;
  • /etc/ssh/ssh_config - OpenSSH;
  • ~/.ssh/ - , SSH ;
  • ~/.ssh/authorized_keys ~/.ssh/authorized_keys - (RSA DSA), ;
  • /etc/nologin - , sshd root ;
  • /etc/hosts.allow /etc/hosts.deny - ( ). ACL;
  • SSH - 22
SSH

-

SSH, . CentOS/RHEL : 

chkconfig sshd off
yum erase openssh-server
SSH

SSH , . , . , /etc/ssh/sshd_config Protocol 2.

SSH

, SSH. SSH . , SSH root, merion networks:

AllowUsers root merion networks

, , :

DenyUsers root merion networks

, , (). :

ClientAliveInterval 300
ClientAliveCountMax 0

300 (5 ).

.rhosts

, . , SSH . :

IgnoreRhosts yes
!

Host-Based Authentication . :

HostbasedAuthentication no
root

root. , root . . su (sudo) . :

PermitRootLogin no

, , . Banner.

22 !

22 . , LAN. , Iptables 192.168.11.0/24:

-A RH-Firewall-1-INPUT -s 192.168.11.0/24 -m state --state NEW -p tcp --dport 22 -j ACCEPT

SSH . IP , . , 962 IP 192.168.11.24

Port 962
ListenAddress 192.168.11.24

. , , :)

. SSH :

Port 962
PermitEmptyPasswords no

INFO DEBUG :

LogLevel INFO

?

Telegram YoutubeVK

50% Merion Academy