systems:secure_server
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| systems:secure_server [2021/07/24 12:45] – [Login with peter] peter | systems:secure_server [2021/07/24 12:57] (current) – [Stop Pings] peter | ||
|---|---|---|---|
| Line 47: | Line 47: | ||
| ---- | ---- | ||
| - | ===== Add peter user to sudo group ===== | + | ===== Add non-root |
| <code bash> | <code bash> | ||
| Line 65: | Line 65: | ||
| ===== Login with non-root account ===== | ===== Login with non-root account ===== | ||
| - | Login using the peter user. | + | Login using the peter user account. |
| ---- | ---- | ||
| Line 85: | Line 85: | ||
| </ | </ | ||
| + | ---- | ||
| + | |||
| + | ==== Logout ==== | ||
| + | |||
| + | <code bash> | ||
| logout | logout | ||
| + | </ | ||
| ---- | ---- | ||
| - | ==== Create public & private key in separate PC. ==== | + | ==== Create public & private key in separate PC ==== |
| <code bash> | <code bash> | ||
| Line 99: | Line 105: | ||
| * No passphrase. | * No passphrase. | ||
| - | * enter | + | |
| - | * enter | + | |
| </ | </ | ||
| Line 114: | Line 120: | ||
| <WRAP info> | <WRAP info> | ||
| - | **NOTE: | + | **NOTE:** This should display some files: |
| * **id_rsa**: | * **id_rsa**: | ||
| Line 131: | Line 137: | ||
| <WRAP info> | <WRAP info> | ||
| - | **NOTE: | + | **NOTE: |
| </ | </ | ||
| Line 140: | Line 146: | ||
| Try to log into server. | Try to log into server. | ||
| - | | + | <WRAP info> |
| + | **NOTE: | ||
| * It is using the keys. | * It is using the keys. | ||
| + | |||
| + | </ | ||
| ---- | ---- | ||
| Line 155: | Line 165: | ||
| sudo vi / | sudo vi / | ||
| - | |||
| - | Port - change from 22 to 717 | ||
| - | AddressFamily inet - change to only allow ipv4. | ||
| - | PermitRootLogin - change to no | ||
| - | PasswordAuthentication yes - change to no | ||
| </ | </ | ||
| + | |||
| + | <WRAP info> | ||
| + | **NOTE:** Make the following changes: | ||
| + | |||
| + | * Port: Change from 22 to 717 | ||
| + | * AddressFamily inet: Only allow ipv4. | ||
| + | * PermitRootLogin: | ||
| + | * PasswordAuthentication yes: Change to **no**. | ||
| + | |||
| + | </ | ||
| + | |||
| ---- | ---- | ||
| Line 188: | Line 204: | ||
| <code bash> | <code bash> | ||
| ssh peter@192.168.1.x -p 717 | ssh peter@192.168.1.x -p 717 | ||
| - | < | + | </code> |
| <WRAP info> | <WRAP info> | ||
| Line 232: | Line 248: | ||
| <WRAP info> | <WRAP info> | ||
| - | **NOTE: Press **y**. | + | **NOTE:** Press **y**. |
| </ | </ | ||
| Line 273: | Line 289: | ||
| </ | </ | ||
| - | Add a new line above this: | + | * Add a new line above this: <file bash / |
| - | + | ||
| - | <file bash / | + | |
| ->ok icmp codes for input | ->ok icmp codes for input | ||
| </ | </ | ||
| Line 282: | Line 296: | ||
| ufw-before-input -p icmp --icmp-type echo-request -j DROP | ufw-before-input -p icmp --icmp-type echo-request -j DROP | ||
| </ | </ | ||
| + | |||
| + | ---- | ||
| + | |||
| + | ==== Reload UFW ==== | ||
| <code bash> | <code bash> | ||
systems/secure_server.1627130747.txt.gz · Last modified: 2021/07/24 12:45 by peter