Increase the security of SSH - Revision history

Cbrochot1072d at 08:55, 27 September 2021

2021-09-27T08:55:28Z

Ikbot at 08:53, 10 February 2017

2017-02-10T08:53:07Z

Ikbot at 08:29, 9 February 2017

2017-02-09T08:29:48Z

Ikbot at 14:25, 8 February 2017

2017-02-08T14:25:49Z

Ikbot at 14:24, 8 February 2017

2017-02-08T14:24:49Z

Ikbot at 08:50, 9 June 2016

2016-06-09T08:50:48Z

Ikbot at 08:50, 9 June 2016

2016-06-09T08:50:47Z

Ikbot at 08:50, 9 June 2016

2016-06-09T08:50:45Z

Ikbot at 08:50, 9 June 2016

2016-06-09T08:50:45Z

Ikbot at 08:50, 9 June 2016

2016-06-09T08:50:44Z

@@ Line 28: / Line 28: @@
 <span data-link_translate_es_title="Aumentar la seguridad de SSH"  data-link_translate_es_url="Aumentar+la+seguridad+de+SSH"></span>[[:es:Aumentar la seguridad de SSH]][[es:Aumentar la seguridad de SSH]]
 <span data-link_translate_en_title="Increase the security of SSH"  data-link_translate_en_url="Increase+the+security+of+SSH"></span>[[:en:Increase the security of SSH]][[en:Increase the security of SSH]]
 Once this is possible, it is recommended to change the default identifiers and the default ports of critical services.

← Older revision		Revision as of 08:53, 10 February 2017
Line 1:		Line 1:
		+	<span data-link_translate_fr_title="Accroître la sécurité de SSH" data-link_translate_fr_url="Accroître la sécurité de SSH"></span>[[:fr:Accroître la sécurité de SSH]][[fr:Accroître la sécurité de SSH]]
		+	<span data-link_translate_en_title="Increase the security of SSH" data-link_translate_en_url="Increase the security of SSH"></span>[[:en:Increase the security of SSH]][[en:Increase the security of SSH]]
		+	<span data-link_translate_es_title="Aumentar la seguridad de SSH" data-link_translate_es_url="Aumentar la seguridad de SSH"></span>[[:es:Aumentar la seguridad de SSH]][[es:Aumentar la seguridad de SSH]]
		+	<span data-link_translate_pt_title="Aumentar a segurança do SSH" data-link_translate_pt_url="Aumentar a segurança do SSH"></span>[[:pt:Aumentar a segurança do SSH]][[pt:Aumentar a segurança do SSH]]
		+	<span data-link_translate_it_title="Aumentare la sicurezza di SSH" data-link_translate_it_url="Aumentare la sicurezza di SSH"></span>[[:it:Aumentare la sicurezza di SSH]][[it:Aumentare la sicurezza di SSH]]
		+	<span data-link_translate_nl_title="Verhoging van de veiligheid van SSH" data-link_translate_nl_url="Verhoging van de veiligheid van SSH"></span>[[:nl:Verhoging van de veiligheid van SSH]][[nl:Verhoging van de veiligheid van SSH]]
		+	<span data-link_translate_de_title="Erhöhen Sie die Sicherheit von SSH" data-link_translate_de_url="Erhöhen Sie die Sicherheit von SSH"></span>[[:de:Erhöhen Sie die Sicherheit von SSH]][[de:Erhöhen Sie die Sicherheit von SSH]]
		+	<span data-link_translate_zh_title="提高 SSH 的安全性" data-link_translate_zh_url="提高 SSH 的安全性"></span>[[:zh:提高 SSH 的安全性]][[zh:提高 SSH 的安全性]]
		+	<span data-link_translate_ar_title="زيادة أمان SSH" data-link_translate_ar_url="زيادة أمان SSH"></span>[[:ar:زيادة أمان SSH]][[ar:زيادة أمان SSH]]
		+	<span data-link_translate_ja_title="SSH のセキュリティを高める" data-link_translate_ja_url="SSH のセキュリティを高める"></span>[[:ja:SSH のセキュリティを高める]][[ja:SSH のセキュリティを高める]]
		+	<span data-link_translate_pl_title="Zwiększenie bezpieczeństwa SSH" data-link_translate_pl_url="Zwiększenie bezpieczeństwa SSH"></span>[[:pl:Zwiększenie bezpieczeństwa SSH]][[pl:Zwiększenie bezpieczeństwa SSH]]
		+	<span data-link_translate_ru_title="Повысить безопасность SSH" data-link_translate_ru_url="Повысить безопасность SSH"></span>[[:ru:Повысить безопасность SSH]][[ru:Повысить безопасность SSH]]
		+	<span data-link_translate_ro_title="Creşte securitatea SSH" data-link_translate_ro_url="Creşte securitatea SSH"></span>[[:ro:Creşte securitatea SSH]][[ro:Creşte securitatea SSH]]
		+	<span data-link_translate_he_title="להגביר את האבטחה של SSH" data-link_translate_he_url="להגביר את האבטחה של SSH"></span>[[:he:להגביר את האבטחה של SSH]][[he:להגביר את האבטחה של SSH]]
	<br />This article has been created by an automatic translation software. You can view the article source [[:fr:Accroître la sécurité de SSH\|here]].<br /><span data-translate="fr"></span><br />		<br />This article has been created by an automatic translation software. You can view the article source [[:fr:Accroître la sécurité de SSH\|here]].<br /><span data-translate="fr"></span><br />
	<span data-link_translate_fr_title="Accroître la sécurité de SSH" data-link_translate_fr_url="Accroître la sécurité de SSH"></span>[[:fr:Accroître la sécurité de SSH]][[fr:Accroître la sécurité de SSH]]		<span data-link_translate_fr_title="Accroître la sécurité de SSH" data-link_translate_fr_url="Accroître la sécurité de SSH"></span>[[:fr:Accroître la sécurité de SSH]][[fr:Accroître la sécurité de SSH]]

@@ Line 1: / Line 1: @@
 <span data-link_translate_fr_title="Accroître la sécurité de SSH"  data-link_translate_fr_url="Accroître la sécurité de SSH"></span>[[:fr:Accroître la sécurité de SSH]][[fr:Accroître la sécurité de SSH]]
 <span data-link_translate_he_title="להגביר את האבטחה של SSH"  data-link_translate_he_url="%D7%9C%D7%94%D7%92%D7%91%D7%99%D7%A8+%D7%90%D7%AA+%D7%94%D7%90%D7%91%D7%98%D7%97%D7%94+%D7%A9%D7%9C+SSH"></span>[[:he:להגביר את האבטחה של SSH]][[he:להגביר את האבטחה של SSH]]
 <span data-link_translate_ro_title="Creşte securitatea SSH"  data-link_translate_ro_url="Cre%C5%9Fte+securitatea+SSH"></span>[[:ro:Creşte securitatea SSH]][[ro:Creşte securitatea SSH]]

← Older revision		Revision as of 14:25, 8 February 2017
Line 1:		Line 1:
		+	<span data-link_translate_fr_title="Accroître la sécurité de SSH" data-link_translate_fr_url="Accroître la sécurité de SSH"></span>[[:fr:Accroître la sécurité de SSH]][[fr:Accroître la sécurité de SSH]]
	<br />This article has been created by an automatic translation software. You can view the article source [[:fr:Accroître la sécurité de SSH\|here]].<br /><span data-translate="fr"></span><br />		<br />This article has been created by an automatic translation software. You can view the article source [[:fr:Accroître la sécurité de SSH\|here]].<br /><span data-translate="fr"></span><br />
	<span data-link_translate_he_title="להגביר את האבטחה של SSH" data-link_translate_he_url="%D7%9C%D7%94%D7%92%D7%91%D7%99%D7%A8+%D7%90%D7%AA+%D7%94%D7%90%D7%91%D7%98%D7%97%D7%94+%D7%A9%D7%9C+SSH"></span>[[:he:להגביר את האבטחה של SSH]][[he:להגביר את האבטחה של SSH]]		<span data-link_translate_he_title="להגביר את האבטחה של SSH" data-link_translate_he_url="%D7%9C%D7%94%D7%92%D7%91%D7%99%D7%A8+%D7%90%D7%AA+%D7%94%D7%90%D7%91%D7%98%D7%97%D7%94+%D7%A9%D7%9C+SSH"></span>[[:he:להגביר את האבטחה של SSH]][[he:להגביר את האבטחה של SSH]]

@@ Line 1: / Line 1: @@
 <span data-link_translate_he_title="להגביר את האבטחה של SSH"  data-link_translate_he_url="%D7%9C%D7%94%D7%92%D7%91%D7%99%D7%A8+%D7%90%D7%AA+%D7%94%D7%90%D7%91%D7%98%D7%97%D7%94+%D7%A9%D7%9C+SSH"></span>[[:he:להגביר את האבטחה של SSH]][[he:להגביר את האבטחה של SSH]]
 <span data-link_translate_ro_title="Creşte securitatea SSH"  data-link_translate_ro_url="Cre%C5%9Fte+securitatea+SSH"></span>[[:ro:Creşte securitatea SSH]][[ro:Creşte securitatea SSH]]
@@ Line 11: / Line 12: @@
 <span data-link_translate_pt_title="Aumentar a segurança do SSH"  data-link_translate_pt_url="Aumentar+a+seguran%C3%A7a+do+SSH"></span>[[:pt:Aumentar a segurança do SSH]][[pt:Aumentar a segurança do SSH]]
 <span data-link_translate_es_title="Aumentar la seguridad de SSH"  data-link_translate_es_url="Aumentar+la+seguridad+de+SSH"></span>[[:es:Aumentar la seguridad de SSH]][[es:Aumentar la seguridad de SSH]]
-<span data-link_translate_fr_title="Accroître la sécurité de SSH"  data-link_translate_fr_url="Accro%C3%AEtre_la_s%C3%A9curit%C3%A9_de_SSH"></span>[[:fr:Accroître la sécurité de SSH]][[fr:Accroître la sécurité de SSH]]
+<span data-link_translate_en_title="Increase the security of SSH"  data-link_translate_en_url="Increase+the+security+of+SSH"></span>[[:en:Increase the security of SSH]][[en:Increase the security of SSH]]
-<br />
+Once this is possible, it is recommended to change the default identifiers and the default ports of critical services.
-Whenever this is possible, we strongly recommend to modify the default identifiers and the default ports of critical services.
+About SSH, land's see some elements that will strengthen the security of this service.
-Regarding SSH, we see here a few elements that will strengthen the security of this service.
+Dans le cadre de la rédaction de cet article, nous nous sommes basés sur une distribution de type Debian Jessie. Suivant celle en place sur votre {{Template:Serveur}}, la configuration peut être amenée à changer. Il faudra, par conséquent, adapter à vos besoins.
-In the context of the drafting of this article, we are based on a type distribution Debian Jessie. Following up on your server, the configuration may need to change. Should, therefore, adapt to your needs.
+By default, to connect in SSH, you must establish a connection on port 22. Change this port can already protect you from many attacks by brute-force.
-If you want to use SSH on a port other than the default one, you will need to modify  ''Port 22'' by  ''Port 55555'' in the file  ''/and c/ssh/sshd_config''.
+In order to make brute-force attacks less effective, you can also disable SSH connection through the root account. It will therefore have one user other than the default account and proceed with an elevation of privileges from this account to have administrator rights.
-In order to make brute-force attacks much less effective, you can also disable SSH connection through the root account. It will therefore have one user other than the default account and proceed to elevation of privilege from this account to have administrator rights.
+On va donc passer l'option associée de ''PermitRootLogin yes'' à ''PermitRootLogin no'' et déclarer les utilisateurs autorisés à se connecter. Pour autoriser l'utilisateur ''ikoula'' à se connecter in SSH, il faudra donc ajouter la ligne suivante in the file de configuration : ''AllowUsers ikoula''
-We will therefore pass the associated option of  ''PermitRootLogin yes'' à ''PermitRootLogin No. '' and declare the users allowed to connect. To allow the user  ''ikoula'' therefore to connect in SSH, add the following line in the configuration file  : ''AllowUsers ikoula''
+Si au delà de deux minutes les informations de connexion ne sont pas saisies lors d'une connexion en SSH à votre {{Template:Serveur}}, la connexion est coupée.
-If beyond two minutes the connection information are not seized during a SSH connection to your server, the connection is cut off.
+We will now change the algorithms used by SSH to limit usage to some by adding two additional lines in the SSH service configuration file :
 <code>
@@ Line 51: / Line 48: @@
-Debian by default always adds a character string to the SSH banner. To put it simply, if do you a telnet to your server  (Telnet IP_SERVER  22), here's what you get  :
+Debian by default always adds a character string to the SSH banner. To put it simply, if perform you a telnet to your {{Template:Serveur}} (Telnet IP_SERVER 22), here's what you get :
 <code>
@@ Line 58: / Line 55: @@
-So let's turn this behavior off to no longer display the name of our distribution  :
+So let's turn off this behavior in order to no longer display the name of our distribution :
 <code>
@@ Line 65: / Line 62: @@
-Now, let's get this  :
+Now, let's get this :
 <code>
@@ Line 72: / Line 69: @@
-The changes are complete, we will restart the service for the changes to be effective  :
+Changes are complete, so let's restart the service for the changes to be effective :
 <code>
@@ Line 79: / Line 76: @@
-Note that you can also set up the IP address for your SSH service restrictions  (If your server is not already behind a firewall for example or your iptables rules do not already need ).
+You can also implement the restriction by IP address for your SSH service (If your {{Template:Serveur}} is not already behind a firewall for example or your iptables rules do not already the necessary).
-We will therefore prohibit SSH connections to everyone and put an exception for our IP addresses  :
+We will therefore prohibit SSH connections to everyone and put an exception for our IP addresses :
 <code>
@@ Line 91: / Line 88: @@
-Thus, only the IP addresses  ''12.34.56.78'' et ''98.76.54.32'' will be allowed to connect to vote SSH server  (Replace with the IP address appropriate course ).
+Thus, only the IP addresses ''12.34.56.78'' et ''98.76.54.32'' will be allowed to connect to vote {{Template:Serveur}} en SSH (Replace with the appropriate, IP addresses of course).
-Alternatively, you can implement authentication by the exchange of keys if you wish.
+Alternatively, you can implement authentication by Exchange of keys if you wish.
 [[Category:Dedicated_server]]
 [[Category:Linux]]
 <br />
 <comments />

← Older revision		Revision as of 08:50, 9 June 2016
Line 1:		Line 1:
		+	<span data-link_translate_he_title="להגביר את האבטחה של SSH" data-link_translate_he_url="%D7%9C%D7%94%D7%92%D7%91%D7%99%D7%A8+%D7%90%D7%AA+%D7%94%D7%90%D7%91%D7%98%D7%97%D7%94+%D7%A9%D7%9C+SSH"></span>[[:he:להגביר את האבטחה של SSH]][[he:להגביר את האבטחה של SSH]]
	<span data-link_translate_ro_title="Creşte securitatea SSH" data-link_translate_ro_url="Cre%C5%9Fte+securitatea+SSH"></span>[[:ro:Creşte securitatea SSH]][[ro:Creşte securitatea SSH]]		<span data-link_translate_ro_title="Creşte securitatea SSH" data-link_translate_ro_url="Cre%C5%9Fte+securitatea+SSH"></span>[[:ro:Creşte securitatea SSH]][[ro:Creşte securitatea SSH]]
	<span data-link_translate_ru_title="Повысить безопасность SSH" data-link_translate_ru_url="%D0%9F%D0%BE%D0%B2%D1%8B%D1%81%D0%B8%D1%82%D1%8C+%D0%B1%D0%B5%D0%B7%D0%BE%D0%BF%D0%B0%D1%81%D0%BD%D0%BE%D1%81%D1%82%D1%8C+SSH"></span>[[:ru:Повысить безопасность SSH]][[ru:Повысить безопасность SSH]]		<span data-link_translate_ru_title="Повысить безопасность SSH" data-link_translate_ru_url="%D0%9F%D0%BE%D0%B2%D1%8B%D1%81%D0%B8%D1%82%D1%8C+%D0%B1%D0%B5%D0%B7%D0%BE%D0%BF%D0%B0%D1%81%D0%BD%D0%BE%D1%81%D1%82%D1%8C+SSH"></span>[[:ru:Повысить безопасность SSH]][[ru:Повысить безопасность SSH]]