wiki.kamaradski.com

User Tools

Site Tools

Trace:
cheatsheet:ssh

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
cheatsheet:ssh [2023/02/21 12:10] – kamaradskicheatsheet:ssh [2023/02/21 12:24] (current) – kamaradski
Line 187: Line 187:
  
 In this example, you're connecting to the "accessible.com" computer and creating a tunnel on port 8888. Any traffic sent to port 8888 on your home computer will be securely forwarded to the "server.example.com" server through the "accessible.com" computer. This is commonly in use in secure networks where you only can or want to expose 1 server to the internet, and you use this as jumphost to reach other services that are in the network behind. In this example, you're connecting to the "accessible.com" computer and creating a tunnel on port 8888. Any traffic sent to port 8888 on your home computer will be securely forwarded to the "server.example.com" server through the "accessible.com" computer. This is commonly in use in secure networks where you only can or want to expose 1 server to the internet, and you use this as jumphost to reach other services that are in the network behind.
 +
 +
 +===== SSHd settings =====
 +
 +Related file: /etc/ssh/sshd_config
 +
 +==== disable the use of passwords to login ====
 +Note: make sure you have a working key-based login in place before doing this (or local access via a real keyboard/monitor or KVM)
 +
 +<code>
 +ChallengeResponseAuthentication no
 +PasswordAuthentication no
 +UsePAM no
 +</code>
 +
 +==== disable the root account from logging in ====
 +
 +<code>
 +PermitRootLogin no
 +#PermitRootLogin prohibit-password
 +</code>
 +
  
cheatsheet/ssh.1676981442.txt.gz · Last modified: 2023/02/21 12:10 by kamaradski

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
CC Attribution-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki