Disable ssh root login

There is a potential Crackers can get in to your server via ssh by figuring out the password of the root using brute force attack. So that it is better to control root access of the server via ssh.

For that use different user to log into the server and use sudo after logged in.

follow the steps to deny root access via ssh :

Create user with preferable username
#useradd chamara

give a strong password for the user
#passwd chamara

edit the following file with your favourite editor (vi is my favourite ;) )

#vim /etc/ssh/sshd_config

find the #PermitRootLogin yes and uncomment it and do "yes" to "no" like as below

PermitRootLogin no

save it and close the file

After that restart the sshd

#/etc/init.d/sshd restart

Thats all, have fun

Comments

Post a Comment

Popular posts from this blog

MRTG configurations

Setup the Device cisco(config)# snmp-server community public RO setup the MRTG server yum install   mrtg   -> will install the MRTG yum install httpd -> will install the apache to view the graphs crated by mrtg To configure the MRTG issue following command: Cfgmaker –global   “WorkDir: /var/www/mrtg” –output /etc/mrtg/mrtg.cfg   device-community - string @( hostname or IP ) in this command :             --global   “WorkDir: /var/www/mrtg”   -> this is global configuration to define where the graphs will be store - -output /etc/mrtg/mrtg.cfg    ->    this is the output file name   device community   string ->   Configured snmp name on the device. In this case it is ‘public’   as   configured under the cisco device hostname or IP  ->   device IP or hostname Now run the indexmaker...
Read more

ADSL configuration on Cisco router

PPPoA   with   Cisco 1700+ WIC-1ADSL I have configured following with Cisco 1700 series router which includes  WIC-1ADSL Card. Please make sure the IOS is latest than 12.2 Configure ATM interface with the PVC number, DSL Mode , encapsulation and dialer pool interface ATM0   no ip address   no atm ilmi-keepalive   dsl operating-mode auto   pvc 0/38   encapsulation aal5mux ppp dialer   dialer pool-member 1 In here please check the dsl operating mode and encapsulation with your ISP. Most probably dsl operating mode   will works with auto. But you should   have to check the encapsulation   with ISP[aal5snap/ aal5mux]. BT(United Kingdom) use aal5mux. After that you have to configure the dialler interface with ADSL username and password accordingly PPPoA with Dynamic IP interface Dialer1   ip address negotiated   ip nat outside   encapsulation ppp   dialer pool 1 ...
Read more