Enabling SSH and Security

[correlative]

Hello,

Real quick, we need to have SSH available to access from outside. How have others handled this? I'm thinking to have it be cert authentication only and installing something like fail2ban.

What do you guys think/what have others done.

Jack

 

[TBWD]

What I have done is

• Change port from 22 to a non stranded port
• Create a Private Key.
• Disable ssh for all users except root
• I use pageant to use the key then use PuTTY to access the server.

 

[cobaltit]

http://lmgtfy.com/?q=how+to+secure+ssh