ubuntu SSH 보안설정
1./etc/ssh/sshd_config backup
|
1 |
mv /etc/ssh/sshd_config /etc/ssh/sshd_config.org |
2.주석제거후 /etc/ssh/sshd_config 생성
|
1 |
cat/etc/ssh/sshd_config.org |grep -v '#' >> /etc/ssh/sshd_config |
3.기본포트 변경
|
1 |
sed -i "s/^Port 22/Port 3022/g" /etc/ssh/sshd_config |
4.root 로그인 금지
|
1 |
sed -i "s/^PermitRootLogin without-password/PermitRootLogin no/g" /etc/ssh/sshd_config |
5.password 인증 yes 설정
|
1 |
echo "PasswordAtuthentication yes" >> /etc/ssh/sshd_config |
6.Client 체크 메세지 설정
|
1 2 |
echo "ClientAliveInterval 300" >> /etc/ssh/sshd_config echo "ClientAliveCountMax 3" >> /etc/ssh/sshd-config |
7.sshd_config 확인
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 |
Port 3022 Protocal 2 HostKey /etc/ssh/ssh_host_rsa_key HostKey /etc/ssh/ssh_host_dsa_key HostKey /etc/ssh/ssh_host_ecdsa_key HostKey /etc/ssh/ssh_host_ed25519_key UserPrivilegeSeparation yes KeyRegenerationIntterval 3600 ServerKeyBits 1024 SyslogFacility AUTH LogLevel INFO LoginGraceTime 120 PermitRootLogin no StrictModes yes RDAAuthentication yes PubkeyAuthentication yes IgnoreThosts yes RhostsRSAAuthentication no HostbaseAuthenyication no PermitEmptyPasswords no ChallengeResponseAuthentication no X11Forwarding yes X11Displayoffset 10 PrintMotd no PrintLastLog yes TCPKeepAlive yes AcceptEnv LANG LC_* Subsystem sftp /usr/lib/openssh/sftp-server UsePAM yes ClientAliveInterval 300 ClientAliveCountMax 3 PasswordAuthentication yes |