|
Keep in mind that just changing the default port from 22 to some other
arbitrary does not mitigate any application port scanning... You will
also want to remove the ability to logon as root via ssh. You can also
setup a wheel group in /etc/groups that only allow specific users to su
to root... -scz dsandif wrote: 47C6CAEA.3060805 AT email.unc.edu" type="cite">you are correct Brian, already done, Thanks! D- Brian Payst wrote:You might also consider changing the port for SSH if you are going to open it up to the wider world. 22 gets so much traffic from attempts to connect to a host that I never run SSH on the standard port. I got tired of parsing through logs with login failures for root, jsmith, ajohnson, etc. and sorting out the noise from the issues was a pain. It should be in /etc/ssh/sshd_config, change the Port line and then reload sshd Your clients then have to specify the new port number when connecting, but that's not too big of a deal. Brian Brian Payst, MS Director of Information Technology Division of Student Affairs The University of North Carolina at Chapel Hill voice: (919) 962-1469 fax: (919) 962-5241 _______________________________________________ unclug mailing list unclug AT lists.ibiblio.org http://lists.ibiblio.org/mailman/listinfo/unclug_______________________________________________ unclug mailing list unclug AT lists.ibiblio.org http://lists.ibiblio.org/mailman/listinfo/unclug |
Archive powered by MHonArc 2.6.24.