[sllug-members]: How does one properly implement OpenSSH?

[Matt Warnock]

Came late to the thread, I should have read ahead before replying-- but
there are packages that help with brute force attacks better than just
changing ports, though that is an option too.  Good discussion.

In my experience, windows machines usually have bigger vulnerabilities
than ssh to worry about.
-  
Matt Warnock, President
RidgeCrest Herbals, Inc.


On Tue, 2008-03-25 at 09:54 -0600, Matt Warnock wrote:
> OpenSSH is pretty easy to implement, apt-get install or yum install
> usually does it.  You can use RSA or DSA keys, if you need that, or you
> can just use passwords.  You can change the port if you want, but it may
> just complicate your life.  Make sure all your accounts have good
> passwords instead, and run a package like SSHDFilter or something
> similar to block repeated brute-force attacks.   If you know you will
> only log in from one machine (like your laptop) you can set up RSA or
> DSA keys and disable passwords entirely.
> -  
> Matt Warnock, President
> RidgeCrest Herbals, Inc.
> 
> 
> On Tue, 2008-03-25 at 08:20 -0600, Nathan Lane wrote:
> > How does one properly implement OpenSSH? Do you need RSA keys? Should
> > I change the port number on which SSH accepts connections? How do I
> > set up users? THe answers to these questions and any other questions
> > you foresee me asking would be very helpful.  I have read the
> > documentation, but it seems very abstract (too many if you want
> > this...), I just need some concrete steps.
> > 
> > -- 
> > Nathan Lane
> > Home, http://www.nathandelane.com 
> > ______________________________________________________________________
> > See http://www.sllug.org/ for latest SLLUG news, information, links.
> > Join SLLUG and other UT LUG members on irc.FreeNode.net channel #Utah
> > sllug-members at sllug.org
> > http://www.sllug.org/cgi-bin/mailman/listinfo/sllug-members
> 
> ______________________________________________________________________
> See http://www.sllug.org/ for latest SLLUG news, information, links.
> Join SLLUG and other UT LUG members on irc.FreeNode.net channel #Utah
> sllug-members at sllug.org
> http://www.sllug.org/cgi-bin/mailman/listinfo/sllug-members