Haack's Wiki

User Tools

Site Tools

Trace:
computing:ssh

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
computing:ssh [2018/07/21 17:22] – oemb1905computing:ssh [2026/09/11 17:39] (current) – oemb1905
Line 31: Line 31:
   chmod 700 ~/.ssh    chmod 700 ~/.ssh 
   chmod 644 ~/.ssh/id_rsa.pub   chmod 644 ~/.ssh/id_rsa.pub
-  chmod 600 ~/.ssh/id_rsahttps://www.digitalocean.com/community/tutorials/how-to-setup-a-firewall-with-ufw-on-an-ubuntu-and-debian-cloud-server+  chmod 600 ~/.ssh/id_rsa
   chmod 755 ~/   chmod 755 ~/
  
Line 39: Line 39:
      
 config options for /etc/ssh/sshd_config config options for /etc/ssh/sshd_config
 +   
 +  Port 53535 
 +  PubkeyAuthentication yes 
 +  PasswordAuthentication no 
 +  PermitRootLogin prohibit-password
   Protocol 2   Protocol 2
-  AllowUsers sexa +  AllowUsers sally 
-  PermitRootLogin no+  AllowUsers johnny 
 +  PermitEmptyPasswords no 
 +  X11Forwarding yes 
 +  PrintMotd yes 
 +  ChallengeResponseAuthentication no 
 +  UsePAM yes 
 +   
 +Then, always restart the service
      
   sudo systemctl restart sshd.service   sudo systemctl restart sshd.service
      
-Enable Firewall+Debian 14 changes to ssh. The kex packets are so large they may not traverse on vpn connections, etc. On the box you connect to open ''sudo nano /etc/ssh/sshd_config''"
  
-https://www.digitalocean.com/community/tutorials/how-to-install-linux-apache-mysql-php-lamp-stack-on-debian-8+  KexAlgorithms curve25519-sha256,ecdh-sha2-nistp256,diffie-hellman-group14-sha256 
 +   
 +On the box reaching out or from which you are connecting, open ''sudo nano /etc/ssh/ssh_config'' and enter these two lines at the end with the same indentation:
  
-https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-postfix-as-a-send-only-smtp-server-on-ubuntu-16-04+  KexAlgorithms curve25519-sha256 
 +  IPQoS none
  
-https://www.digitalocean.com/community/tutorials/how-to-setup-a-firewall-with-ufw-on-an-ubuntu-and-debian-cloud-server+If you have not yet noticed, nor made any changes and need to connect quickly, use the following:
  
-https://www.digitalocean.com/community/tutorials/how-to-set-up-apache-virtual-hosts-on-debian-8 +  ssh -o KexAlgorithms=curve25519-sha256 -o IPQoS=none root@10.13.13.20
- +
-https://www.digitalocean.com/community/tutorials/how-to-install-moodle-on-ubuntu-16-04 +
- +
-  +
  
 +Then, if you use git across a vpn, you will now need to accept those environment variables. So on the git server's sshd_config file, add the git protocol as an allowance:
  
- --- //[[netcmnd@jonathanhaack.com|oemb1905]] 2018/05/19 20:03//+  AcceptEnv LANG LC_* GIT_PROTOCOL
  
 + --- //[[alerts@haacksnetworking.org|oemb1905]] 2026/09/11 17:38//
computing/ssh.1532193754.txt.gz · Last modified: (external edit)

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: GNU Free Documentation License 1.3
GNU Free Documentation License 1.3 Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki