Re: Securing debian box

2007-02-24 Thread Jim Hyslop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alexander Wasmuth wrote: > I've also added "Protocol 2" to omit ssh 1 and I set UsePam to no > because I wasn't able to prohibit password authentication with PAM > enabled. I'm currently not planning on using PAM, but I'll disable it anyway - that way

Re: Securing debian box

2007-02-24 Thread Franck Joncourt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alexander Wasmuth wrote: > * Jim Hyslop wrote: > >> PermitRootLogin no >> RSAAuthentication no >> PubkeyAuthentication yes >> IgnoreRhosts yes >> RhostsRSAAuthentication no >> HostbasedAuthentication no >> PermitEmptyPasswords no >> ChallengeResponseA

Re: Securing debian box

2007-02-24 Thread Alexander Wasmuth
* Jim Hyslop wrote: > PermitRootLogin no > RSAAuthentication no > PubkeyAuthentication yes > IgnoreRhosts yes > RhostsRSAAuthentication no > HostbasedAuthentication no > PermitEmptyPasswords no > ChallengeResponseAuthentication no > PasswordAuthentication no > UsePAM yes > Subsystem sftp /usr/lib/

Re: Securing debian box

2007-02-23 Thread Roberto C. Sanchez
On Fri, Feb 23, 2007 at 05:05:24PM -0500, Jim Hyslop wrote: > > I've set the following options in my sshd_config (these aren't all the > options, just the ones that appear to me to be relevant to my question): > > PermitRootLogin no > RSAAuthentication no On my system I have 'RSAAuthentication y

Re: Securing debian box

2007-02-23 Thread David Watson
On Friday 23 February 2007 22:05, Jim Hyslop wrote: > Oh, and when this is all OK, I'll set up port forwarding on my firewall > to send port 22 to the machine in question. > C/C++ * OOD * SW Development & Practices * Version Management Changing the default port number for ssh connections also

Securing debian box

2007-02-23 Thread Jim Hyslop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I have a Debian box on my home network (currently running Sarge, and when I have two seconds to rub together I'll upgrade to Etch). I want to be able to ssh into the machine from outside the home network, e.g. if I'm at a coffee shop with a WAP. U