UNC Linux Users Group

[Greg Jansen <count0 AT email.unc.edu>]

Here's doc that has some useful additional security suggestions along 
the same lines:
http://help.unc.edu/1859
(One interesting tip within is how to obscure your system info by 
changing the login banner and SMTP greeting.)  (Be sure to add your 
comments to the doc!)

Here's a list of Linux guides on Help:
http://help.unc.edu/6387

Greg J.

Scott Zentz wrote:
> Keep in mind that just changing the default port from 22 to some other 
> arbitrary does not mitigate any application port scanning... You will 
> also want to remove the ability to logon as root via ssh. You can also 
> setup a wheel group in /etc/groups that only allow specific users to 
> su to root...
>
> -scz
>
> dsandif wrote:
> > you are correct Brian, already done, Thanks!
> >
> > D-
> >
> > Brian Payst wrote:
> >   
> > > You might also consider changing the port for SSH if you are going to  
> > > open it up to the wider world. 22 gets so much traffic from attempts  
> > > to connect to a host that I never run SSH on the standard port. I got  
> > > tired of parsing through logs with login failures for root, jsmith,  
> > > ajohnson, etc.
> > > and sorting out the noise from the issues was a pain.
> > >
> > > It should be in /etc/ssh/sshd_config, change the Port line and then  
> > > reload sshd
> > >
> > > Your clients then have to specify the new port number when connecting,  
> > > but that's not too big of a deal.
> > >
> > > Brian
> > >
> > > Brian Payst, MS
> > > Director of Information Technology
> > > Division of Student Affairs
> > > The University of North Carolina at Chapel Hill
> > > voice: (919) 962-1469 fax: (919) 962-5241
> > >
> > >
> > >
> > > _______________________________________________
> > > unclug mailing list
> > > unclug AT lists.ibiblio.org
> > > http://lists.ibiblio.org/mailman/listinfo/unclug
> > >   
> > >     
> >
> > _______________________________________________
> > unclug mailing list
> > unclug AT lists.ibiblio.org
> > http://lists.ibiblio.org/mailman/listinfo/unclug
> >   
> ------------------------------------------------------------------------
>
> _______________________________________________
> unclug mailing list
> unclug AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/unclug
>