Securing SSH

by admin on August 13, 2009 · 0 comments

Change the SSHD port

Open the file /etc/ssh/sshd_config
Uncomment the line “#Port 22″ and change the port number.
Save the file and restart sshd.
Now SSHD will run on the port you specified, And you will have to connect with “ssh -p port” from client side

Disallow the root user login

Open the file /etc/ssh/sshd_config
Uncomment the line “#PermitRootLogin yes” and change it to “PermitRootLogin no”
Save the file and Restart sshd.
Now you can not login as root, You will have to login with a non root
user and then youc an do “su” to switch to root user

Hiding SSH Version String

This is not recommended, As some applications may need the ssh version
string. But if you need to run ssh on the default port and also need to
make your server secure as per the standards of verisign then you will
have to do a custom compile, And before compiling ssh, edit the file
version.h and change the version string in it.

Previous post:

Next post: