Skip to content

Latest commit

 

History

History
120 lines (80 loc) · 1.95 KB

ssh.md

File metadata and controls

120 lines (80 loc) · 1.95 KB
Raw

SSH connection to server

generate ssh key:

ssh-keygen -t ed25519 -f ${HOME}/.ssh/name it

Set up

get IP address from server

hostname -I

create config file in .ssh directory on your machine

Host server1
     HostName (ip)
     User (username)
     Port 22
     IdentityFile (file where your ssh pub key is stored)

use it to connect to the server

ssh server1

copy ssh public key to your machine:

ssh-copy-id <machine name>

Manually append your public key to the remote ssh server's key to authorized_keys file (when on windows powershell)

do this on server

vi ~/.ssh/authorized_keys

To disable SSH password authentication, SSH in to your server to edit this file as root

 sudo vi /etc/ssh/sshd_config

into authentication section write:

PasswordAuthentication no

run this command to reload config file

sudo systemctl reload sshd

links:

disable pswd authentication

add sshpub key to server

sshconfig file client

Managing sshd_config file

on freebsd:

vi /etc/ssh/sshd_config

man sshd_config

Match (user,group,address) statement makes a specific rules for chossen subject/s always place Match statements at the and of a configfile(sshd_config):

Match user testuser1;
PasswordAuthentication yes

Display Motd(message of the day)

PrintMotd yes

Print last log:

PrintLastLog yes

Time to authenticate:

LoginGraceTime 2m

Confgure RED (radom early drop) protocol

MAXStartups 10:30:100

Deny/allow users/groups from log via ssh ( deny even if the Match permits) it:

Denyusers testuser1

AllowGroups wheel

Check if sshd is running on server

ps ax | grep sshd

tunel mssql

ssh user@servername -L 0.0.0.0:3306:127.0.0.1:3306