There are a number of things you should do to your ssh connection in
general to make it much more secure.

1) Configure AllowUsers to allow only the user(s) you want remote
connections from.

2) Create users with atypical usernames for remote connections (eg
sb907priv).  Common names (dave, root, admin, etc.) by the hundreds or
thousands are being attempted via SSH breakin scripts.  Do not give
access to common names

3) Read about GatewayPorts and forwarding.  This is a security risk.

4) Disable remote root login via PermitRootLogin.

5) Set Protocol to 2 - do not allow SSH1 connections.


-- 
MrC
_______________________________________________
plugins mailing list
[email protected]
http://lists.slimdevices.com/lists/listinfo/plugins

Reply via email to